Cisco Cisco Email Security Appliance C370D ユーザーガイド

Injection debug logs record the SMTP conversation 
between the Cisco IronPort appliance and a specified host 
connecting to the system. Injection debug logs are useful for 
troubleshooting communication problems between the 
Cisco IronPort appliance and a host on the Internet.

System logs record the following: boot information, DNS 
status information, and comments users typed using 

commit

 

command. System logs are useful for troubleshooting the 
basic state of the appliance. 

The CLI audit logs record all CLI activity on the system. 

FTP logs record information about the FTP services 
enabled on the interface. Connection details and user 
activity are recorded. 

HTTP logs record information about the HTTP and/or 
secure HTTP services enabled on the interface. Because the 
graphical user interface (GUI) is accessed via HTTP, the 
HTTP logs are ostensibly the GUI equivalent of the CLI 
Audit logs. Session data (new session, session expired) and 
pages accessed in the GUI are recorded. 

NTP logs record the conversation between the appliance 
and any NTP (Network Time Protocol) servers configured. 
For more information, see “Editing the Network Time 
Protocol (NTP) Configuration (Time Keeping Method)” in 
the “System Administration” chapter of the Cisco IronPort 
AsyncOS for Email Configuration Guide. 

LDAP debug logs are meant for debugging LDAP 
installations. (See the “LDAP Queries” chapter in the Cisco 
IronPort AsyncOS for Email Advanced Configuration 
Guide.) Useful information about the queries that the Cisco 
IronPort appliance is sending to the LDAP server are 
recorded here.