Configuring Events Reporting Settings; Screen Alarm Log Entries - Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1 Administration Manual

Network and Security Manager Administration Guide

Configuring Events Reporting Settings

746
Table 95: Email Server Settings for Log Entries (continued)
Setting
Include Traffic Log
SMTP Server Name
Email Address 1
Email Address 2
Use the Events reporting settings to configure the managed device to report specific
events to NSM.
Select the appropriate NSM Device Server, then select the events that are logged on the
device and reported to NSM. The following sections detail each event.
NOTE: For security devices running ScreenOS 5.0 and later, you must also
select Enable Logging.

Screen Alarm Log Entries

The device generates screen alarm log entries when a device detects network traffic that
matches the screen settings enabled on the device.
To receive screen alarm log entries, you must:
Enable the device to generate screen alarm log entries for NSM in Report Settings >
NSM.
Enable the device to send log entries with the desired severity settings to NSM in Report
Settings > General > NSM.
Screen alarm log entries appear in the Log Viewer and display the following columns of
information in the Log Viewer:
Source Address
Destination Address
Service
Action
Description
When logging is enabled for a rule in the installed security policy
and traffic matches the rule, the device sends the traffic log entry
to the specified SMTP server.
The name of the Simple Mail Transfer Protocol server that
receives e-mail notification messages. You must specify the
SMTP server name and at least one e-mail address to receive
e-mail notification.
The primary e-mail address that receives e-mail notification
messages from the device.
The secondary e-mail address that also receives e-mail
notification from the device.
Copyright © 2010, Juniper Networks, Inc.