Setting up alerts for web filter violations

Note: To view this alert, you need a Smoothwall Filter license for the Guardian module.

Procedure

1. On the REPORTS menu, under the Alerts submenu, click Alert settings.
2. Click Web filter violations to expand the alert configuration details.
3. Under the Forbidden user accesses section, define the alert thresholds for when users access blocked domains:
   1. To turn on this alert, select the Monitor for blocked accesses option.
   2. Enter in the Warning threshold, the number of hits allowed for blocked accesses before the warning alert is triggered.
   3. Enter in the Caution threshold, the number of hits allowed for blocked accesses before the caution alert is triggered.
   4. To exclude adverts from this alert, select the Exclude adverts option.
4. Under the Forbidden IP address accesses section, define the alert thresholds for when IP addresses access blocked domains:
   1. To turn on this alert, select the Monitor for blocked accesses option.
   2. Enter in the Warning threshold, the number of hits allowed for blocked accesses before the warning alert is triggered.
   3. Enter in the Caution threshold, the number of hits allowed for blocked accesses before the caution alerts is triggered.
   4. To exclude adverts from this alert, select the Exclude adverts option.
5. Click Save.

The alert is triggered only if the method used to authenticate users supplies a username, see our help topic, Managing authentication policies.