Viewing logged program events

By default, all Program events are recorded in the Log Viewer.

To view logged program events:

  1. Select Alerts & Logs|Log Viewer.
  2. Select Program, from the Alert Type drop-down list.

Table 5-1 provides an explanation of the log viewer fields available for Program events.

 Program event log fields
Field
Explanation
Rating
Event rating based on the Protection Level of the security option.
Date/Time
Date and time the event occurred.
Type
Type of program alert that occurred. Possible values for this column include:
  • Program Access
  • Repeat Program
  • New Program
Program
The program (displayed as the application file) that requested access. If a program name is unavailable, refer to the Description field of the Entry Details window.
Source IP
The IP address of the computer sending the request. If the source IP cannot be determined, this field may be left blank.
Destination IP
The IP address of the computer receiving the request. If the destination IP cannot be determined, this field may be left blank.
Direction
Specifies whether the request that caused the event was incoming, outgoing, or occurred as a result of internal traffic on your computer (data).
Action Taken
Specifies whether the request was Allowed or Blocked. Action is followed by /
Count
The number of times this action was taken.
Source DNS
The domain name server of the computer that is sending the request.
Destination DNS
The domain name server of the computer that is receiving the request.


Some features are only in select versions of the product: find out which features you have


www.zonealarm.com

 

Copyright © 2008 Check Point Software LTD