System Logs

MultiNet offers a number of detailed logging facilities which provide information on system activity and usage. The default areas of logging are:

• Dialup Connections
• Email Transfers
• Restricted Content (Email)
• Restricted Content (WWW)
• System Errors
• Web Access

Dialup Connections

The dialup connections log records all the Internet connections made by MulitNet. The call duration is shown in seconds. Fields recorded comprise:

1. Log Date - the date and time the log entry was created
2. Duration - the length of time the Internet connection was open

Email Transfers

The email log records the complete history of email passing through the MultiNet System. Email is first logged on receipt and is assigned a unique Id. Whether it was received from the Internet or from the internal network is also displayed.

This unique Id is then assigned to all actions thereafter pertaining to that specific email. Therefore the same Id is referenced when the email is picked up by a users mail client or when the email is dispatched to the Internet as may be appropriate. Similarly if auto reply or mail forwarding are in use on the mail account the Id for that email is carried forward for each entry log of the emails history through MultiNet. If mail archiving is in use then the mail Id numbers for archive and logs will correspond.

This complete history enables system administrators to trace the path of any email through MultiNet by sender, recipient or by any other information category of the email.

Fields recorded comprise:

1. Log Date - the date and time the log entry was created
2. Mail Id - the unique Id assigned to the email
3. To - who the email was destined for
4. From - who the email cam from
5. Action - where the email went on leaving MultiNet (e.g. picked up by mail client)

Restricted Content (Email)

If content checking for email is configured then all violations are recorded. Specific fields recorded comprise:

1. Log Date - the date and time the log entry was created
2. To - who the email was destined for
3. From - who the email cam from
4. Reason - shows the restricted word or phrase and the relevant dictionary
5. Type - whether the email was internal or Internet mail
6. Rejected - whether the email was rejected or not

Restricted Content (WWW)

If WWW content checking is enabled then all violations can be recorded. Fields recorded comprise:

1. Log Date - the date and time the log entry was created
2. URL - the site to which the connection was made/attempted
3. User - the internal user who made the request
4. Reason - shows the restricted word or phrase and the relevant dictionary
5. Access Denied - whether access to the site was or was not denied

System Errors

All information on system errors and situations which may impact MultiNet operation are captured and reported.

The System Errors log records:

1. Log Date - the date and time the log entry was created
2. Priority - reports the seriousness of the event
3. Module - the part of MultiNet affected by the event
4. Error Text - human readable description of the event generated by MultiNet

Web Access

The Web Access log shows all user activity utilising the Proxy Server. Individual user activity can be monitored which can aid greatly in formulating and defining any access control policy. Specific fields recorded comprise:

1. Log Date - the date and time the log entry was created
2. User - the internal user name
3. Protocol - the protocol used
4. Site - the address of the remote computer
5. Path - the file path to the resource
6. Type - the type of resource (e.g. .html or .gif etc)
7. Served From Cache - whether served from cache or not

Index of Technical Papers