Watchguard Firebox X1000 Betriebsanweisung PDF herunterladen (Seite 203)

Customizing Logging and Notification by Service or Option

User Guide 187

OTE

WatchGuard allows only one notification type per event.

Setting Launch Interval and Repeat Count

Two parameters work in conjunction with the Event Processor Repeat

Interval to control notification timing:

Launch Interval

The minimum time (in minutes) between separate launches of a

notifier. Set this parameter to prevent the launch of several

notifiers in response to similar events that take place in a short

amount of time.

Repeat Count

The threshold for how often an event can repeat before the

Firebox activates the special repeat notifier. The repeat notifier

creates a log entry stating that the notifier in question is repeating.

Notification repeats only after this number of events occurs.

As an example of how these two values interact, suppose you have set up

notification with these values:

• Launch interval = 5 minutes

• Repeat count = 4

A port space probe begins at 10:00 a.m. and continues once per minute,

triggering the logging and notification mechanisms. Here is the time line

of activities that would result from this event with the above timing and

repeating setup:

1 10:00–Initial port space probe (first event)

2 10:01–First notification launched (one event)

3 10:06–Second notification launched (reports five events)

4 10:11–Third notification launched (reports five events)

5 10:16–Fourth notification launched (reports five events)

The time intervals between activities 1, 2, 3, 4, and 5 are controlled by the

launch interval, which was set to 5 minutes.

1 2 ... 198 199 200 201 202 203 204 205 206 207 208 ... 270 271

Keine Kommentare

Watchguard Firebox X1000 Betriebsanweisung Seite 203