H3C Technologies H3C SecBlade LB Cards - Manual (Page 53)

44
Configuring session logging
Session logging can be configured only in the Web interface.
Session logging records users' access information, IP address translation information, and traffic
information, and can output the records in a specific format to a log host, allowing administrators to
perform security auditing.
Session logging records an entry for a session if it reaches the specified threshold. Session logging
supports two categories of thresholds:
• Time threshold—When the lifetime of a session reaches this threshold, a log entry is output for the
session.
• Traffic threshold—The traffic threshold can be in units of the number of bytes or the number of
packets. When the traffic of a session reaches the specified number of bytes or packets, a log entry
is output for the session.
For more information about session management, see Security Configuration Guide.
Session logs are output in the format of user logs. To view session logs, you also need to configure user
logging.
Session logging configuration task list
Task Remarks
Configuring a session logging
policy
Required.
Configure a session logging policy, specifying the source zone and
destination zone of the sessions and the ACL for filtering log entries.
By default, no session logging policy exists.
Setting session logging
thresholds
Required.
Configure the time threshold or/and traffic threshold for session logging.
By default, both the time threshold and traffic threshold are 0, meaning that
no session logging entries are output.
IMPORTANT:
If both the time threshold and traffic threshold are configured, a log entry is
output for the session when it reaches whichever threshold and the statistics of
the session will be cleared.
Configuring a session logging policy
1. Select Log Report > Session Log > Log Policy from the navigation tree to display existing session
logging policies, as shown in Figure 14 .