PoliWall

Alerts

• PoliWall-Threat detected: This alert is generated when malicious activity is detected in transient traffic. E.g. spam, malware.
• PoliWall-Blacklisted IP detected in allowed traffic: This alert is generated when blacklisted source or destination IP address is detected in allowed traffic.

Reports

• PoliWall-Threat traffic details: This report provides information related to malicious activity detected in inbound or outbound traffic which includes Traffic Direction, Protocol Type, Action Type, Source IP, Source Port, Source Country, Destination IP, Destination Port and Destination Country, Block Reason and Risk Score fields.
• PoliWall-Blacklisted IP activity details: This report provides information related to blacklisted source or destination IP address detected in allowed traffic which includes Analysis Date, AS Number, AS Owner, Blacklist Status, City, Continent, Country Code, IP Address, ISP, Longitude\Latitude, Region, Reverse DNS and Source Log fields.           

Alert

• PoliWall: New IP detected in allowed traffic– This alert is generated when new source or destination IP address is detected in allowed traffic.          

Report

• PoliWall-Allowed traffic details: This report provides information related to inbound or outbound traffic permitted by PoliWall which includes Traffic Direction, Protocol Type, Source IP, Source Port, Source Country, Destination IP, Destination Port and Destination Country fields.
• PoliWall-Blocked traffic details: This report provides information related to inbound or outbound traffic prohibited by PoliWall which includes Traffic Direction, Protocol Type, Source IP, Source Port, Source Country, Destination IP, Destination Port, Destination Country, Block Reason and Block Details fields.