View List of IPS Events. Sophos v16.5

Figure 488: Firewall Log Viewer

View List of IPS Events

Logs are displayed only if the Network Protection module is subscribed.

Time

Time when the event occurred.

Log Comp

Displays the log components of IPS events.

Types of log components: anomaly and signatures.

Action

Detect: Intrusion attempts detected by the device.

Drop: Intrusion attempts dropped by the device.

Username

Username of the user that triggered the signature.

Source IP

Source IP address (IPv4 / IPv6).

Destination IP

Destination IP address (IPv4 / IPv6).

Signature ID

Signature ID of the signature.

Signature Name

Name for the detected signature.

Category

Category of the signature.

Platform

Platform of the signature.

Target

Target of the signature.

Policy Rule

Firewall rule applied.

Message ID

Message ID of the message.

Live PCAP

| Appendix A - Logs | 525