Download Innominate mGuard Version 5 - Innominate Security Technologies AG

Transcript
mGuard Version 5 – Firewall Logging
Table of Contents
1
Disclaimer____________________________________________________________________________________ 2
2
Log Abbreviations ____________________________________________________________________________ 3
3
Firewall Traversal ____________________________________________________________________________ 5
4
Log Prefixes __________________________________________________________________________________ 7
5
4.1
Consistancy Check and TCP Flags (fw-invalid-input-…, fw-invalid-forward-…, fw-invalid-output-…) ____ 7
4.2
Remote Access Rules (fw-ssh-access-…, fw-https-access-…, fw-snmp-access-…) ___________________ 7
4.3
Port Forwarding (fw-portforwarding-…) _______________________________________________________ 7
4.4
User Firewall (ufw-…) _______________________________________________________________________ 8
4.5
Firewall, Anti-Spoofing and Connection Tracking (fw-incoming-…, fw-outgoing-…) __________________ 8
4.6
VPN Firewall (fw-vpn-<name>-in-…, fw-vpn-<name>-out-…)____________________________________ 8
4.7
SYN Flood Protection (SYN-flood) ____________________________________________________________ 9
4.8
ICMP Flood Protection (ICMP-flood) __________________________________________________________ 9
Related Documentation _____________________________________________________________________ 10
Document ID: AN205002A07-005
Page 1 of 11