WSM User Guide - WatchGuard Technologies

Configuring Policy PropertiesSetting logging propertiesUse the Properties tab of the Policy Properties dialog box to set logging properties for a policy. Youcan configure the Firebox to record a log message when a policy denies packets. You can also set upnotification when packets are allowed or denied.1 From the Properties tab, click Logging.The Logging and Notification dialog box appears.2 Set the parameters and notification:Enter it in the logWhen you enable this check box, the Firebox sends a log message when it sees traffic of thetype selected in the Category list. Domain name resolution on the Firebox can slow the time forthe Firebox to send the log message to the log file. The default configuration of all policies is forthe Firebox to send a log message when it denies a packet.Send SNMP TrapWhen you enable this check box, the Firebox sends an event notification to the SNMPmanagement system. The trap identifies the occurrence of a condition, such as a threshold thathas exceeded its predetermined value.Send notificationWhen you enable this check box, the Firebox sends a notification when it sees traffic of the typeselected in the Category list. You set the notification parameters from the Log Server. For moreinformation on the Log Server, see the “Logging and Notification” chapter.You can configure the Firebox to do one of these actions:- E-mail The Firebox sends an e-mail message when the event occurs. Set the e-mail addressin the Notification tab of the Log Server user interface.- Pop-up Window The Firebox makes a dialog box appear on the management station whenthe event occurs.You can control the time of notification, together with the Repeat Count. For informationabout how to use the Launch Interval and Repeat Count settings, see the subsequent section.Setting Launch Interval and Repeat CountYou can control the time of the notification, together with the Repeat Count, with these parameters:Launch IntervalThe minimum time (in minutes) between different notifications. This parameter preventsmultiple notifications in a short time for the same event.User Guide 153