H3c-technologies H3C SecCenter UTM Manager Uživatelský manuál Strana 202
- Strana / 262
- Tabulka s obsahem
- KNIHY
Hodnocené. / 5. Na základě hodnocení zákazníků
194
Recent events list
The firewall management component presents firewall attack events not only through graphs but also in
a table list. The recent events list presents you the attack events occurred during the last hour, including
the device IP address, the event’s time, source IP address, destination IP address, event description,
protocol, source port, and destination port. It also supports events query by different filters.
Configuration guide
From the navigation tree of the firewall management component, select Recent List under Events Monitor.
The recent events page appears, listing the attack events that occurred during the last hour. as shown in
Figure 186. Table 170 describes the query option of the list. Table 171 describes the fields of the event list.
Figure 186 List of recent attack events
Table 170 Query option description
Option Description
Filter Select a filter to display specific events.
Table 171 Fields of the recent events list
Field Description
Time Time when the event occurred
Device IP IP address of the firewall device
Source IP Source IP address of the attack packets
Destination IP Destination IP address of the attack packets
Event Description of the event
Protocol Name Protocol of the attack packets
Source Port Source port of the attack packets
Destination Port Destination port of the attack packets
- H3C SecCenter UTM Manager 1
- Preface 3
- Obtaining documentation 4
- Technical support 4
- Documentation feedback 4
- Contents 5
- Overview 9
- Installing H3C SecCenter 10
- Registering the UTM Manager 12
- Uninstalling the UTM Manager 13
- CAUTION: 14
- Integration with iMC 15
- Removing SCMTOOL 17
- System management 18
- Device group list 19
- Adding a device group 19
- Template list 21
- Adding a template 21
- Figure 13 Add a template 22
- Item Description 22
- Managing devices 23
- Device list 24
- Adding a device 25
- Figure 15 Add a device 26
- Managing device software 28
- Running Config 36
- Importing device software 39
- Managing events 41
- Device interface event list 42
- Operator management 43
- Operator list 44
- Adding an operator 45
- Managing operation logs 46
- Changing your password 47
- System configuration 48
- Configuring management ports 49
- Configuring the mail server 51
- Configuring SMS alarming 52
- Managing filters 53
- Filter list 54
- Adding a filter 54
- Managing LDAP servers 55
- LDAP server list 56
- Adding an LDAP server 56
- Configuring segments 58
- Monitoring the disk space 59
- Managing subsystems 61
- Adding a subsystem 62
- Bandwidth management 64
- Figure 53 Traffic snapshot 65
- Segment traffic comparison 66
- Traffic anomaly alarm 67
- Service traffic trend 69
- Service traffic distribution 73
- Generic service analysis 76
- Detailed session statistics 85
- Managing IP groups 86
- IP group list 87
- Adding an IP group 88
- Behavior auditing 97
- Figure 83 Website analysis 98
- Email application analysis 99
- User behavior auditing 100
- FTP application auditing 101
- Email application auditing 102
- Telnet application auditing 104
- SQL application auditing 105
- NAT logs auditing 106
- Quick auditing 107
- User details 108
- User behavior alarm 109
- Option Description 114
- Configuration guide 119
- Database access alarm list 122
- Field Description 124
- Item Description 125
- URL analysis 126
- Aggregate analysis 127
- User action analysis 128
- Category auditing 129
- Audit logs backup 130
- Scheduling auto backup 132
- Importing backed up logs 133
- IPS management 136
- UTM device list 137
- Adding UTM devices 138
- Upgrading signature files 138
- Managing signature files 139
- Uploading a file 140
- Modifying a signature file 140
- Rule list 141
- Displaying device statistics 142
- Realtime monitoring 143
- Monitoring devices 149
- Event analysis 150
- Attack event details 154
- Managing report export tasks 163
- Adding a report export task 164
- Policy management 165
- Anti-virus policy list 171
- Adding an anti-virus policy 171
- Policy application list 174
- Adding a policy application 175
- Displaying attack signatures 176
- Configuring custom events 179
- Custom event list 180
- Adding a custom event 181
- Changing the event status 186
- Modifying a custom event 187
- Policy list 188
- Firewall management 190
- Firewall device list 191
- Adding firewall devices 191
- Viewing device statistics 192
- Configuration segment list 194
- Managing deployment tasks 199
- Attack events monitoring 200
- Recent events list 202
- Viewing event details 205
- Report export task list 208
- Event auditing 209
- Auditing operation logs 210
- Auditing blacklist logs 211
- Auditing NAT logs 212
- Auditing MPLS logs 213
- Auditing other logs 213
- Security policy management 214
- Security zone list 215
- Adding a security zone 215
- Managing time ranges 216
- Time range list 217
- Adding a time range 217
- Managing services 218
- Predefined services 219
- User-defined services 219
- Service groups 221
- Managing IP addresses 223
- Address ranges 224
- Subnet addresses 226
- IP address groups 228
- Managing interzone rules 230
- Adding an interzone rule 231
- Managing interzone policies 234
- Adding an interzone policy 235
- Rule management 235
- Sorting interzone rules 236
- Applying interzone policies 238
- Applied rules list 239
- Filed Description 240
- Configuration example 1 241
- Configuration example 2 243
- Configuring the SecCenter 246
- Configuring an IPS policy 250
- Configuring an AV policy 253
- Verification 255
Související produkty a manuály pro Bezpečnost H3c-technologies H3C SecCenter UTM Manager
(8 stránky)© 2020, manymanuals.cz. Všechna práva vyhrazena. | 0.031 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentáře k této Příručce