Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 19: Auditing and Reporting
Auditing on the Sidewinder G2
542
Attack Description
content security
violation
content security
violation severe
denied
authentication
Detects attacks of all severities that are content security
violations. This attack category detects spam, keyword
reject, mime virus change, and mime virus reject attacks.
Detects severe attacks that are content security violations.
This attack category detects spam, keyword reject, mime
virus change, and mime virus reject attacks. Severe
attacks indicate something is occurring that an
administrator should know.
Detects when a user attempts to authenticate and enters
invalid data. For example, if a user is required to enter a
password and entered it incorrectly, the denied auth event
would log the event.
error Detects all system events identified as AUDIT_T_ERROR
in the audit stream.
general attack all Detects general attacks of all severities that do not fall into
the pre-defined categories.
general attack
severe
hardware software
failure
host license
exceeded
keyword filter
failure
Detects severe general attacks that do not fall into the predefined
categories. Severe attacks indicate something is
occurring that an administrator should know.
Detects when a hardware or software component fails.
Detects when the number of hosts protected by the
Sidewinder G2 exceeds the number of licensed hosts.
Detects when an SMTP mail message is rejected due to a
configured keyword filter.
license expiration Detects when a licensed feature is about to expire.
log overflow Detects when the log partition is close to filling up.
mime virus Detects when a connection is rejected due to the MIME or
Anti-virus policy.
network probe Detects network probe attacks, which occur any time a
user attempts to connect or send a message to a TCP or
UDP port which has no service.
network traffic Detects all connections that successfully pass through the
Sidewinder G2.
not config change Detects all attack and system events that are not
configuration changes.
More...