User guide
User Guide 77
CHAPTER 6 Configuring Logging
An
event
is any single activity that occurs at the Firebox® X Edge, such
as denying a packet from passing through the Firebox.
Logging
is the
process of recording and storing information about these events.
Because the log keeps a record of events that show possible security
problems, logging is an important part of an effective network security
policy. For example, a sequence of denied packets can show that an
unauthorized person tried to access your network. You can configure
your firewall to log a wide variety of events, including specific events
that occur at the level of individual services.
N
OTE
N
OTE
The records in the Firebox X Edge log are erased if the power supply
is disconnected or if the Firebox is rebooted from the Firebox X Edge
Web pages. The records are not erased if an external syslog or WSEP
logging host is configured.
Viewing Log Messages
The Firebox X Edge event log records a maximum of 150 log messages.
New entries are added to the top of the log. If a new entry is added
when the event log is full, the oldest log message is removed.
The log messages include the time synchronizations between the Fire-
box X Edge and the WatchGuard Time Server, packets discarded