- Table of Contents
-
- 06-System
- 01-High availability group
- 02-VRRP
- 03-Track
- 04-BFD
- 05-NQA
- 06-Basic log settings
- 07-Session log settings
- 08-NAT log settings
- 09-AFT log settings
- 10-Threat log settings
- 11-Application audit log settings
- 12-URL filtering log settings
- 13-Bandwidth alarm logs
- 14-Attack defense log settings
- 15-NetShare log settings
- 16-Report settings
- 17-Session settings
- 18-Signature upgrade
- 19-Software upgrade
- 20-License management
- 21-Administrators
- 22-Date and time
- 23-Configuration management
- 24-Packet capture
- 25-Webpage Diagnosis
- 26-Packet trace
- 27-Fast Internet Access
- 28-SNMP
- 29-IRF
- 30-IRF advanced settings
- 30-IRF advanced settings(only for F50X0-D and F5000-AK5X5 firewalls)
- 31-Contexts
- 31-Contexts(only for F50X0-D and F5000-AK5X5 firewalls)
- 32-About
- 33-MAC address learning through a Layer 3 device
- 34-Bandwidth management logs
- 35-Configuration log settings
- 36-Context rate limit logging
- 37-Heartbeat log settings
- 38-Diagnostic Info
- 39-IP access logs
- 40-IP reputation log settings
- 41-IPsec diagnosis
- 42-Load balancing logging
- 43-Load balancing test
- 44-MAC authentication online users
- 45-Packet capture
- 45-Packet capture(only for F50X0-D and F5000-AK5X5 firewalls)
- 46-Ping
- 47-Reboot
- 48-Security policy log
- 49-Tracert
- 50-WAF log settings
- Related Documents
-
Title | Size | Download |
---|---|---|
07-Session log settings | 24.82 KB |
Session log settings
This help contains the following topics:
· Configure session log setting
Introduction
Session logs provide information about user access, IP address translation, and network traffic for security auditing. They can be output in flow log or fast log output format.
The device supports time-based or traffic-based logging:
· Time-based logging—The device outputs session logs regularly.
· Traffic-based logging—The device outputs a session log when the traffic amount of a session reaches a threshold.
If you set both time-based and traffic-based logging, the device outputs a session log when whichever is reached. After outputting a session log, the device resets the traffic counter and restarts the interval for the session.
Session logs can be generated only when session logging is enabled on interfaces.
Configure session log settings
Procedure
1. Click the System tab.
2. Select Log Settings > Session Log Settings.
3. Configure session logging.
Table 1 Session logging configuration items
Item |
Description |
Log type |
Select a log type. By default, flow log is used. |
Session creation logging |
This feature enables the device to output a session log when a session entry is created. |
Session deletion logging |
This feature enables the device to output a session log when a session entry is removed. |
Traffic-based logging |
Set either the byte-based threshold or the packet-based threshold. The device outputs a session log when the traffic amount of a session reaches the set threshold. |
Time-based logging |
Set the time-based threshold for the device to output session logs. |
4. Click Apply.
5. Click Add interface to enable session logging on the specified interface.
Table 2 Configuration items for enabling session logging on an interface
Item |
Description |
IP version |
Select an IP version, IPv4 or IPv6. |
Port |
Select a port. You can also enable session logging on the specified directions of the port. |
ACL |
Select an ACL to filter IPv4 or IPv6 sessions that can trigger session logging on the interface. If no ACL is specified, the device outputs session logs for all IPv4 or IPv6 sessions on the interface. |
6. Click OK.
7. Verify the configuration on the Session Logging page.