Using the security log

The Security Log table displays logs related to security features.

Figure  60 shows the security log table. By default, the log is filtered to display IP Reputation logs, and the table lists the most recent records first.

You can use the following category filters to review logs of interest:

• IP Reputation—Traffic logged by the IP Reputation feature
• DoS—Traffic logged by the SYN Flood feature
• WAF—Traffic logged by the WAF feature
• Geo—Traffic logged by the Geo IP block list feature

Within each category, you can use Filter Setting controls to filter the table based on the values of matching data:

• Date
• Time
• Proto
• Service
• Src
• Src_port
• Dst
• Dst_port
• Policy
• Action

The last column in each table includes a link to log details.

Before you begin:

• You must have Read-Write permission for Log & Report settings.

To view and filter the log:

1. Go to Log & Report > Log Browsing.
2. Click the Security Logs tab to display the attack log.
3. Click Filter Settings to display the filter tools.
4. Use the tools to filter on key columns and values.
5. Click OK to apply the filter and redisplay the log.

Table 113 to Table 116 list the log columns in the order in which they appear in the log.