Viewing logged OSFirewall events
By default, all OSFirewall events are recorded in the Log Viewer.
To view logged OSFirewall events:
- Select Tools | Logs| Log Viewer.
- Select OSFirewall, from the Alert Type drop-down list.
The following table provides an explanation of the log viewer fields available for OSFirewall events.
Field
|
Explanation
|
Rating
|
Event rating based on the Protection Level of the security option.
|
Date/Time
|
Date and time the event occurred.
|
Type
|
Type of OSFirewall alert that occurred. Possible values for this column include:
- Process
- Message
- Module
- Registry
- File
- Execution
- Driver
- Physical memory
|
Subtype
|
The specific event that initiated the Type of access requested (for example, OpenThread would be a subtype of Process).
|
Data
|
The path to the file that was attempting to be modified.
|
Program
|
Displays the path to the program that performed the behavior.
|
Action Taken
|
Specifies whether the request was Allowed or Blocked. Action is followed by /manual or /auto to indicate whether the action was performed by you or by SmartDefense Advisor.
|
Count
|
The number of times this action was taken.
|
OSFirewall event log fields
|
Print
