help
To prevent the firewall from reporting errors to the management console:
1. On the Home page, under Firewall, click Configure firewall.
For information about the Home page, see
About the Home page (page 6).
2. Under Configurations, click Configure next to the location that you want to configure.
3. On the General tab, under Reporting, clear the Report errors to the management console check box.
9.7.5 Configure desktop messaging
You can control what messages the firewall displays on the desktop.
Unknown applications and traffic notifications are not shown in interactive mode since the same information is displayed in the learning dialogs.
1. On the Home page, under Firewall, click Configure firewall.
For information about the Home page, see
About the Home page (page 6).
2. Under Configurations, click Configure next to the location that you want to configure.
3. On the General tab, under Desktop messaging, do one of the following:
■
■
To display notifications for firewall warnings and errors, select the Show warnings and
errors check box.
To display notifications for unknown applications and traffic, select the Show unknown
applications and traffic check box.
9.8 Firewall logging
9.8.1 About the firewall log viewer
The Sophos Client Firewall log viewer enables you to view, filter, and save details of the following:
■
All connections
■
■
■
Connections that have been allowed or blocked
Firewall events
The system log
9.8.2 Open the firewall log viewer
■
On the Home page, under Firewall, click View Firewall log.
For information about the Home page, see
About the Home page (page 6).
81
Sophos Endpoint Security and Control
82
9.8.3 Configure firewall logging
To manage the size and contents of the firewall's event log database:
1. On the Home page, under Firewall, click Configure firewall.
For information about the Home page, see
About the Home page (page 6).
2. Click the Log tab.
3. To manage the size of the firewall's event log database, select one of the following options:
■
■
To allow the database to grow without limit, click Keep all records.
To clear out old records, click Delete old records, and then configure the Log cleanup
settings.
4. Under Log cleanup settings, select one or more of the following options:
■
■
■
Click the Delete records after check box, and then enter or select a figure in the Days box.
Click the Keep no more than check box, and then enter or select a figure in the Records box.
Click the Keep size under check box, and then enter or select a figure in the MB box.
9.8.4 Change how the firewall log viewer looks
1. On the Home page, under Firewall, click View firewall log.
For information about the Home page, see
About the Home page (page 6).
2. On the View menu, click Layout.
3. In the Customize View dialog box, select items to hide or display:
■
■
■
■
The Console tree is displayed in the left pane.
The Toolbar is displayed at the top of the firewall log viewer.
The Description bar is displayed above the data in the right pane.
The Status bar is displayed at the bottom of the firewall log viewer.
9.8.5 Customize the data format
You can change the format used to display the following items of data in the firewall logs:
■
Display ports as a number or a name, for example HTTP or 80.
■
■
Display applications as icons, file paths, or both.
Specify the size of unit that is used to display the data transfer speed, for example KBytes or
MBytes.
■
Hide or display the gridlines.
To customize the data format:
1. On the Home page, under Firewall, click View firewall log.
For information about the Home page, see
About the Home page (page 6).
help
2. On the View menu, click Customize.
3. Select the options you want.
9.8.6 Hide or display columns in the firewall log viewer
1. On the Home page, under Firewall, click View firewall log.
For information about the Home page, see
About the Home page (page 6).
2. Click an item in the console tree that displays columns in the details pane.
3. On the View menu, select Add/Remove Columns.
You can also right-click any of the column headings.
4. In the Columns dialog box, do one of the following:
■
■
To hide a column, clear its check box.
To display a column, select its check box.
9.8.7 Reorder columns in the firewall log viewer
1. On the Home page, under Firewall, click View firewall log.
For information about the Home page, see
About the Home page (page 6).
2. Click an item in the console tree that displays columns in the details pane.
3. On the View menu, select Add/Remove Columns.
You can also right-click any of the column headings.
4. In the Columns dialog box, click a column name, and then click Move Up or Move Down to change the position of the column.
Notes
■
■
You can also reorder columns in the details pane by using a mouse to drag a column heading to the left or right of its original position. As you drag a column, highlighting between the column headings indicates the new position of the column.
You can resize columns by using the mouse to drag column headings.
9.8.8 Filter records in a firewall log
You can sort the firewall log records by creating a filter.
To filter the firewall log records:
1. On the Home page, under Firewall, click View firewall log.
For information about the Home page, see
About the Home page (page 6).
2. In the console tree, select a log.
3. On the Action menu, click Add filter.
4. Follow the instructions in the Filter wizard.
83
Sophos Endpoint Security and Control
The filter appears in the console tree immediately below the node for the log you want to filter.
9.8.9 Export all records from a firewall log
To export all the records from the firewall log to a text or CSV file:
1. On the Home page, under Firewall, click View firewall log.
For information about the Home page, see
About the Home page (page 6).
2. In the console tree, select a log.
3. Right-click the record list, and then click Export All Records.
4. In the File name box, type a name for the file.
5. In the Save as type list, click the file type that you want.
9.8.10 Export selected records from a firewall log
To export selected records from a firewall log to a text or CSV file:
1. On the Home page, under Firewall, click View firewall log.
For information about the Home page, see
About the Home page (page 6).
2. In the console tree, select a log.
3. Select the records you want to export.
If the records update rapidly, on the View menu, clear the Auto refresh check box.
4. On the Action menu, click Export Selected Records.
5. In the File name box, type a name for the file.
6. In the Save as type list, click the file type that you want.
84
