OfficeScan 10.6 Administrator's Guide - Trend Micro™ Online Help

Using the OfficeScan Firewall
To configure the firewall violation outbreak criteria and notifications:
PATH: NOTIFICATIONS > ADMINISTRATOR NOTIFICATIONS > OUTBREAK NOTIFICATIONS
1. In the Criteria tab:
a. Go to the Firewall Violations section.
b. Select Monitor firewall violations on networked computers.
c. Specify the number of IDS logs, firewall logs, and network virus logs.
d. Specify the detection period.
Tip: Trend Micro recommends accepting the default values in this screen.
OfficeScan sends a notification message when the number of logs is exceeded. For
example, if you specify 100 IDS logs, 100 firewall logs, 100 network virus logs, and
a time period of 3 hours, OfficeScan sends the notification when the server receives
301 logs within a 3-hour period.
2. In the Email tab:
a. Go to the Firewall Violation Outbreaks section.
b. Select Enable notification via email.
c. Specify the email recipients.
d. Accept or modify the default email subject and message. You can use token
variables to represent data in the Subject and Message fields.
3. Click Save.
TABLE 11-4. Token Variables for Firewall Violation Outbreak
Notifications
VARIABLE DESCRIPTION
%A Log type exceeded
%C Number of firewall violation logs
%T Time period when firewall violation logs accumulated
11-29