McAfee VSF09EMB1RAA User Guide - Page 106

Event Logging

Page 106 highlights

104 McAfee VirusScan Plus Event Logging Firewall allows you to enable or disable event logging and, when enabled, which event types to log. Event logging allows you to view recent inbound, outbound events and intrusion events. Configure event log settings You can specify and configure the types of Firewall events to log. By default, event logging is enabled for all events and activities. 1 On the Internet & Network Configuration pane, under Firewall protection is enabled, click Advanced. 2 On the Firewall pane, click Event Log Settings. 3 If it is not already selected, select Enable Event Logging. 4 Under Enable Event Logging, select or clear the event types that you want or do not want to log. Event types include the following: ƒ Blocked Programs ƒ ICMP Pings ƒ Traffic from Banned IP Addresses ƒ Events on System Service Ports ƒ Events on Unknown Ports ƒ Intrusion Detection (IDS) events 5 To prevent logging on specific ports, select Do not log events on the following port(s), and then enter single port numbers separated by commas, or port ranges with dashes. For example, 137-139, 445, 400-5000. 6 Click OK. View recent events If logging is enabled, you can view recent events. The Recent Events pane shows the date and description of the event. It displays activity for programs that have been explicitly blocked from accessing the Internet. ƒ On the Advanced Menu, under the Common Tasks pane, click Reports & Logs or View Recent Events. Alternatively, click View Recent Events under the Common Tasks pane from the Basic Menu.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205

104
McAfee VirusScan Plus
Event Logging
Firewall allows you to enable or disable event logging and, when
enabled, which event types to log. Event logging allows you to
view recent inbound, outbound events and intrusion events.
Configure event log settings
You can specify and configure the types of Firewall events to log.
By default, event logging is enabled for all events and activities.
1
On the Internet & Network Configuration pane, under
Firewall protection is enabled
, click
Advanced
.
2
On the Firewall pane, click
Event Log Settings
.
3
If it is not already selected, select
Enable Event Logging
.
4
Under
Enable Event Logging
, select or clear the event types
that you want or do not want to log. Event types include the
following:
Blocked Programs
ICMP Pings
Traffic from Banned IP Addresses
Events on System Service Ports
Events on Unknown Ports
Intrusion Detection (IDS) events
5
To prevent logging on specific ports, select
Do not log events
on the following port(s)
, and then enter single port numbers
separated by commas, or port ranges with dashes. For
example,
137-139, 445, 400-5000
.
6
Click
OK
.
View recent events
If logging is enabled, you can view recent events. The Recent
Events pane shows the date and description of the event. It
displays activity for programs that have been explicitly blocked
from accessing the Internet.
On the
Advanced Menu
, under the Common Tasks pane,
click
Reports & Logs
or
View Recent Events
. Alternatively,
click
View Recent Events
under the Common Tasks pane
from the Basic Menu.