Security Alerts

Sessionwall uses intrusion alerts to inform the user when specific events occur. The following types of alert methods are available in Sessionwall:

	Sending an Email message or fax
	Adding an entry to a NT System Log
	Displaying a specific message on the Sessionwall operator screen
	Invoking a Windows program
	Creating a sound
	Sending a message to the system operator using an SNMP trap
	Sending a message to a pager

Notifications

Sessionwall provides a comprehensive set of intrusion alert notification options. The following notification types are available:

Intrusion alert messages appear when Sessionwall detects intrusion attempts and suspicious network activities.

When the conditions of a rule match a session, an action occurs. This action can be in the form of an intrusion alert e.g. sending a fax or Email message, playing a sound or creating an SNMP trap; or it can involve an action that is invisible to the user e.g. running another application, exporting a log file or adding details to the Windows NT event log.

The various notification mechanisms are invoked based on specific conditions established by the administrator.

A warning can be sent to a specific user or group of users that his/their Email has been traced.

An intrusion alert can be sent to a user that one of his sessions has been blocked.

A specific message can be sent to the Network Administrator or any other address that an event has been blocked.

A defined Windows program can be automatically invoked following detection of a blocked event

The program automatically sends a notification to the user that there is a problem with MAPI definition.

The program automatically sends a notification to the user if the log file he is attempting to view is too large to load.