H3C Technologies H3C SecCenter UTM Manager - Manual (Page 106)

98
Figure 90 SQL application auditing page
Table 84 SQL application auditing query options
Option Description
Device Group
Select a device group to collect statistics on SQL traffic of the devices in the
device group.
Logon Name Type the login name of a user.
Peer Logon Name Type the login name of a peer.
Action Type an SQL operation.
User IP Type the IP address of a user.
User Name Type the username of a user.
Type Select a SQL operation type.
Start Time
End Time
Specify a time range.
The time period can be 24 hours at most.
NAT logs auditing
From the navigation tree of the behavior auditing component, select NAT Logs under User Behavior
Auditing to enter the NAT log auditing page, as shown in Figure 91 . The NAT logs record the NAT
translation events on devices such as the H3C firewalls or UTM devices. Each log records the source IP
address, destination IP address, source port, and destination port before and after address translation,
and the time when address translation occurs. The NAT logs allow for auditing network behaviors and
tracking illegal network access. Table 85 describes the NAT log auditing query options.