2009.8.4 Fine-Tuning Loggin Message Generation

• If only firewall error conditions should be recorded and no one will regularly view the message logs, choose severity level 3(errors).
• If you are primarily interested in seeing how traffic is being filtered by the firewall access lists, choose severity level 4(warnings).
• If you need an audit trail of firewall users and their activity, choose severity level 5(notifications).
• If you will be using a firewall log analysis application, you should choose severity level 6(informational). This is the only level that produces messages about connections that are created, as well as the time and data volume usage.