R3721-F3210-F3171-HP High-End Firewalls System Management and Maintenance Configuration Guide-6PW101

78
Item Descri
p
tion
Log Host
IP Address
Log Host 1
Set the IPv4/IPv6 addresses, port number and the VPN instance (this option is
available only when you specify a log host with an IPv4 address) of the syslog log
hosts.
The log information can be reported to the specified remote log hosts in the format
of syslog, and you can specify up to four syslog log hosts.
IMPORTANT:
If you specify an IPv6 address or a VPN instance for a log host, logs generated by the
functions in the advanced security policy module will not be output to the log host.
Log Host 2
Log Host 3
Log Host 4
Refresh Period
Set the refresh period on the log information displayed on the log report web
interface.
You can select manual refresh or automatic refresh:
• Manual—You need to refresh the web interface when displaying log report
information.
• Automatic—You can select to refresh the web page every 10 seconds, 30
seconds, 1 minute, 5 minutes, or 10 minutes.
Configuring user logging
NOTE:
To generate user logs, configure session logging (see Configuring session logging).
Introduction
User logging records users' access information to the external network. The device classifies and
calculates flows through the 5-tuple information, which includes source IP address, destination IP address,
source port, destination port, and protocol number, and generates user logs. User logging records the
5-tuple information of the packets and number of the bytes received and sent. With user logging,
administrators can track and record accesses to the network, facilitating the availability and security of
the network.
User logs can be output in either of the following formats:
• Output to the information center of the device in the format of system information, and the
information center then determines the output destination.
• Output to the specified user log host in UDP packets in binary format.
Two versions are available with user logging: version 1.0 and version 3.0, which are slightly different in
packet format. For more information about packet formats, see Table 12 and Table 13.
Table 12 Packet forma
t in user logging version 1.0
Field Descri
p
tion
SourceIP Source IP address.
DestIP Destination IP address.
SrcPort TCP/UDP source port number.
DestPort TCP/UDP destination port number.