ZyXEL Communications 2WE Network Card User Manual


 
ZyWALL 2 and ZyWALL 2WE
Centralized Logs 18-1
Chapter 18
Centralized Logs
This chapter contains information about configuring general log settings and viewing the
ZyWALL’s logs. Refer to the appendices for example log message explanations and how to view
the logs via the SMT command interpreter interface.
18.1 Introduction to Centralized Logs
You can select which logs you want the ZyWALL to record and which alerts you want the ZyWALL to
send. You can look at the desired logs in one location. You can also have the ZyWALL record and display
statistical data about Internet usage, including what web sites were visited how many times, what protocols
or service ports have been used and how much traffic has gone between individual LAN IP addresses and
the WAN.
18.1.1 Alerts and Logs
An alert is a type of log that warrants more serious attention. They include system errors, attacks (access
control) and attempted access to blocked web sites or web sites with restricted web features such as cookies,
active X and so on. Some categories such as System Errors consist of both logs and alerts. You may
differentiate them by their color in the View Log screen. Alerts display in red and logs display in black.
18.2 View Log
Click the Logs link in the navigation panel to open the View Log screen.
Use the View Log screen to see the logs for the categories that you selected in the Log Settings screen (see
section 18.3). Options include logs about system maintenance, system errors, access control, allowed or
blocked web sites, blocked web features (such as ActiveX controls, java and cookies), attacks (such as
DoS) and IPSec.