Configure Logging, Alerts, And Event Notifications; Configure The Email Notification Server - NETGEAR UTM5 Reference Manual

Configure Logging, Alerts, and Event Notifications

By default, the UTM logs security-related events such as accepted and dropped packets on
different segments of your LAN, denied incoming and outgoing service requests, hacker
probes and login attempts, content-filtering events such as attempts to access blocked sites
and URLs, unwanted email content, spam attempts, and many other types of events. You can
configure the UTM to email logs and alerts to a specified email address.
WARNING:
When you reboot the UTM, the logs are lost. If you want to save
the logs, make sure that you configure the UTM to send the logs to
a syslog server. For information about how to do this, see
Configure and Activate System, Email, and Syslog Logs
page 439.
For you to receive the logs in an email message, the UTM's email notification server needs to
be configured, and email notification needs to be enabled. If the email notification server is
not configured or email notification is disabled, you can still query the logs and generate log
reports that you then can view on the web management interface screen or save in CSV
format.
The logging, alerts, and event notifications are described in the following sections:
•

Configure the Email Notification Server

• Configure and Activate System, Email, and Syslog Logs
• How to Send Syslogs over a VPN Tunnel between Sites
• Configure and Activate Update Failure and Attack Alerts
• Configure and Activate Firewall Logs
For more information about logs, see
Configure the Email Notification Server
The UTM can automatically send information such as notifications and reports to the
administrator. You need to configure the necessary information for sending email, such as the
administrator's email address, email server, user name, and password.

To configure the email notification server:
• Select Monitoring > Email Notification. The Email Notification screen displays. (The
following figure shows an example.)
ProSecure Unified Threat Management (UTM) Appliance
Query the Logs
Monitoring System Access and Performance
on page 478.
438
on