Print

Previous

Next

Viewing logged program events

By default, all Program events are recorded in the Log Viewer.

To view logged program events:

  1. Select Tools | Logs|Log Viewer.
  2. Select Program, from the Alert Type drop-down list.

The following table provides an explanation of the log viewer fields available for Program events.

Field

Explanation

Rating

Event rating based on the Protection Level of the security option.

Date/Time

Date and time the event occurred.

Type

Type of program alert that occurred. Possible values for this column include:

  • Program Access
  • Repeat Program
  • New Program

Program

The program (displayed as the application file) that requested access. If a program name is unavailable, refer to the Description field of the Entry Details window.

Source IP

The IP address of the computer sending the request. If the source IP cannot be determined, this field may be left blank.

Destination IP

The IP address of the computer receiving the request. If the destination IP cannot be determined, this field may be left blank.

Direction

Specifies whether the request that caused the event was incoming, outgoing, or occurred as a result of internal traffic on your computer (data).

Action Taken

Specifies whether the request was Allowed or Blocked. Action is followed by /

Count

The number of times this action was taken.

Source DNS

The domain name server of the computer that is sending the request.

Destination DNS

The domain name server of the computer that is receiving the request.

Program event log fields

See Also

Setting general Application Monitor options

 
©2011 Check Point Software Technologies Ltd. All rights reserved. Some features are only in premium products