Event Log - Zoom Cable Modem/Router User Manual

Table 15. Basic Menu Option
Option
IPv4 Firewall
Protection
Port Scan Detection
Block Fragmented IP
packets
IP Flood Detection

Event Log

The Event Log page allows you to send firewall event log reporting to a standard SysLog
server or via email. Individual attack or configuration items can be selected that will be
sent to the SysLog server or emailed so that only the items of interest can be monitored.
Permitted connections, blocked connections, known Internet attack types, and Cable
Modem/Router configuration events can also be logged. The SysLog server must be on
the same subnet as the Private LAN behind the Cable Modem/Router (typically
192.168.0.x).
To access the Event Log page:
1
Click Firewall in the menu bar.
2
Then click the Event Log submenu.
Figure 23 shows an example of the menu and Table 16 describes the items you can
select.
To enable the automatic email alerts:
1
Configure the email address you want to send alerts to. You also need to configure
the email account you will send from (this may be the same account). This includes
the SMTP (outgoing)/ mail server address, together with username and password.
You may need to contact your service provider to find the information.
2
Check the Enable box and click the Apply button.
Description
By increasing the level from low to medium or high
you can restrict traffic to only certain predefined
ports.
Detects and blocks port scan activity originating on
both the LAN and WAN.
Prevents all fragmented IP packets from passing
through the firewall.
Detects and blocks packet floods originating on
both the LAN and WAN.
69