PortalProtect provides
comprehensive information about various scans. It saves this information to a database.
You can
query the database and obtain logs for analysis. For example, you can analyze Security
Risk scan
logs to view the most common viruses and scan actions and see which users are introducing
viruses
to the network.
You can use this information to reduce system vulnerabilities and review the effectiveness
of
your security policies; then, if necessary, adjust the policies accordingly. Additionally,
you
can export the log data in
.csv format for further analysis or to share the
information.The following is a listing of the information contained within the various log types:
-
Security risk scan logs–contains information about the: Date & Time, Violator, Security Risk Name, Action, File Name, and Location. You can filter the Security risk scan logs for:
-
All
-
Detected virus/malware
-
Uncleanable virus/malware
-
Detected spyware/grayware
-
-
File blocking logs–contains information about the: Date & Time, Violator, Policy Name, Action, File Name, Triggered File Type/Name, and Location.
-
Content Filtering logs–contains information about the: Date & Time, Violator, Policy Name, Action, File name/Web Content Title, Triggered Keywords, and Location.
-
Data loss prevention logs–contains information about the: Date & Time, Violator, Policy Name, Action, File Name/Web Content Title, Template(s), and Location.
-
Web reputation logs–contains information about the: Date & Time, Violator, Risk Level, Web Content Title, Suspicious URL, Action, and Location.
-
Update logs–contains information about the: Date & Time, and Description.
-
Scan events logs–contains information about the: Date & Time, and Description.
-
Backup logs–contains information about the: Date & Time, Violator, Security Rick Name, File Name, Location, and Backup Path.
-
Unscannable files logs–contains information about the: Date & Time, Location, Violator, Reason, File Name, and Action.
-
Event tracking logs–contains information about the: Username, Event time, IP address, Event type, Source type, and Description.