beautypg.com

Auditing nat logs, Auditing interzone access logs – H3C Technologies H3C SecCenter UTM Manager User Manual

Page 212

background image

204

Auditing NAT logs

From the navigation tree of the firewall management component, select NAT Logs under Event Auditing

to enter the NAT log auditing page. The page lists NAT logs of H3C firewalls. Each log records the

source IP:port and destination IP:port before and after network address translation, as well as the NAT

session start time and end time.

Figure 197 NAT log auditing

Auditing interzone access logs

From the navigation tree of the firewall management component, select Inter-Zone Access Logs under
Event Auditing to enter the inter-zone access log auditing page, as shown in

Figure 198

.

A zone is a set consisting of one or more network segments. Inter-zone access logs are logs recorded by

the firewall device when network segments of security zones are attacked. Inter-zone access log auditing

is for analysis of such logs. Each log records the time when the attack occurred, the attack's source zone,

destination zone, source IP:port, destination IP:port, attack protection rule ID, protocol, and action taken

by the system, helping you know about the inter-zone access status of the network.

Figure 198 Inter-zone access log auditing