Configuring Logging - HP ProCurve Secure Router 7203 dl Advanced Management And Configuration Manual

ProCurve Secure Router OS Firewall—Protecting the Internal, Trusted Network
For a complete list of protocol keywords, refer to your SROS CLI reference
guide. You can also use the ? help command. For example:
ProCurve(config)# ip policy-timeout tcp ?
You can similarly set individual timeouts for a specific UDP application. Again,
you specify a port number (from 0 to 65,535), a range of port numbers, or a
keyword for a well-known application such as DNS, NetBIOS, Simple Network
Management Protocol (SNMP), or Routing Information Protocol (RIP). Use
this command:
Syntax: ip policy-timeout udp [all-ports | <port > | range <first port number> <last port
number> | <keyword> | range <first keyword> <last keyword>] <seconds>
For example, you can set the timeout for SNMP sessions to 45 seconds:
ProCurve(config)# ip policy-timeout udp snmp 45

Configuring Logging

By default, the Secure Router OS firewall logs events to the router's event-
history log. It also creates a log for every 100 attacks it blocks and every 100
packets it matches to a policy.
To configure the event-history log, you must:
specify the priority level for events logged to the event-history
You can also:
change how many blocked attacks generate a log
change how many ACP matches generate a log
forward logs to a syslog server
forward logs to an email address or addresses
Configuring Logging
4-23