Understanding Firewall Logs

Updated

By default, ZoneAlarm software records all Firewall events in a log, and archives the log file every seven days. To change the logging settings, see Managing Alerts and Logs Settings.

To view Firewall Log events:

  1. Open the ZoneAlarm software client.
  2. From the Tools menu, select Logs.
    The Alerts and Logs window opens, and shows the Log Viewer.
  3. From the Select log type drop-down list, select Firewall.
    The Log Viewer shows the Firewall log entries:

To control the number of entries in the Log Viewer:

Click and select the number of log entries from the Show Last drop-down menu:

  • 10
  • 25
  • 50
  • 100
  • 200
  • All

To clear the Log Viewer entries:

Click Clear.

To refresh the Log Viewer:

Click Refresh.

To add an IP address to a Security Zone:

  1. Select an entry in the Log Viewer table.
  2. Click Add To Zone.
    The Add Zone window opens.
  3. Select the Zone you want to add the IP address to - Trusted or Blocked.
  4. Add a description.
  5. Click OK.

To learn more about blocked traffic:

  1. Select an entry in the Log Viewer table.
  2. Click More Info.
    The SmartDefense Advisor web page opens, and provides information about the selected blocked packet type.
Was this article helpful?

Have more questions?

Submit Request