An alarm is an event that triggers a notification, which is a mechanism to tell a network administrator about a condition in the network. In a proxy definition, an alarm might occur when traffic matches, or does not match, a rule in the proxy. An alarm might also occur when the Actions to take selections are set to an action other than Allow.
For example, the default definition of the FTP-proxy has a rule that denies the download of files whose file types match any of these patterns: .cab, .com, .dll, .exe, and .zip. You can specify that an alarm is generated whenever the Firebox takes the Deny action because of this rule.
For each proxy action, you can define what the Firebox does when an alarm occurs.
AV alarm settings are only available if Gateway AntiVirus applies to the proxy. Gateway AntiVirus is available for the SMTP, POP3, HTTP, FTP, or TCP-UDP proxies. For all other proxies, you can only configure the proxy alarm settings.
In the Proxy Action configuration:
- Select Proxy and AV Alarms.
- Configure the Firebox to send an SNMP trap, a notification to a network administrator, or both. The notification can either be an email message to a network administrator or a pop-up window on the administrator's management computer.
For more information on the Proxy and AV alarms settings, go to Set Logging and Notification Preferences.
- To change settings for one or more other categories in this proxy, go to the topic on the next category you want to modify.
- Save the settings.
If you modified a predefined proxy action, when you save the changes you are prompted to clone (copy) your settings to a new action.
For more information on predefined proxy actions, go to About Proxy Actions.