The monitor alerts from Smoothwall and the dashboard page show many messages about accesses to or from specific IP addresses that the firewall has blocked.
The monitoring engine can generate alerts when the firewall is blocking access to or from a specific IP address. The threshold for the alert is set on the Alert settings page. See the help topic, Alert settings.
When the threshold value is reached within a time span of five minutes, an alert is generated. There are two options for thresholds. One generates a caution message, the other a warning message.
Solution and explanation
The alert is meant to help identify excessive traffic from or to specific systems which might cause problems on the network. The alert values should be modified to suit the traffic amounts usually seen, which vary from location to location. In case the alerts are not needed or wanted, you can turn them off on the Alerts page. See the help topic, Turning on instant alerts.