Symantec 10268947 User Guide - Page 102

102 Incidents and Events Monitoring events Viewing event notices Symantec Network Security monitors operational events as they are processing, such as startup and shutdown of a software or appliance node, or errors experienced within a module. The Incidents tab displays notices about the following types of operational events: ■ Monitored Host Unavailable: Symantec Network Security has detected a drop in network availability. ■ iButton Token Failure: The iButton, used only by Network Security software nodes, stores the private key portion of the Symantec Network Security signature certificate to safeguard the private key against being stolen or compromised. The iButton also confirms the identity of a software node. Note: Notify us of your iButton's impending expiration. Replace it before it expires to ensure that the log files continue to be signed and the iButton can continue to perform its authentication and data hashing functions. See the Symantec Network Security Installation Guide for instructions on iButton replacement. ■ iButton Certificate Expiration: Several times during the 30 days prior to the expiration of your encryption certificate, warnings of the impending expiration are displayed in the Active Incidents tab. The notices are sent every 6 hours. The priority of the notices increases as the certificate lifetime gets shorter: Lifetime life < 1 hour 1 hour =< life < 1 day 1 day =< life < 3 days 3 days =< life < 1 week 1 week =< life < 1 month Priority Critical Urgent High Medium Low Warnings of the impending expiration are displayed in the Active Incidents tab. Expiration dates are also displayed when Symantec Network Security is restarted. ■ Network Security SuperUser Login: Symantec Network Security displays this event whenever a SuperUser logs into the Network Security console.