Overview

All system alert messages are recorded in the Alert log. The Alert log provides a complete history of system alerts generated by Kerio Control: virus detection, dialing and hanging up, reached quotas, detection of P2P networks, etc.

Each event in the Alert log includes a timestamp (date and time when the event was logged) and information about the alert type (in capitals). The other information varies by alert type.

Solution

Viewing Alerts

To view all generated Kerio Control system alerts, go to Status > Alert Messages.

Alerts are displayed in the language chosen for the administration interface. The left side of the Alerts section lists all alerts sorted by date and time. Each line provides information on one alert:

• Date — Date and time of the event.
• Alert — Event type.

It is possible to hide or show detailed information by clicking the Hide Details or Show Details button in the bottom-right corner.

System Alerts

You can add the following system alerts:

• A peer-to-peer network client detected — Kerio Control sends this alert when users start using P2P. The alert includes information about IP address, resolution (P2P was blocked or traffic was slowed down), and so on.
• Antivirus check failed — Kerio Control sends this alert when the antivirus engine fails to check files (typical for password-protected or damaged files).
• Configuration backup failed — Kerio Control sends this alert when configuration backup to MyKerio or an FTP server fails.
• Configuration file checksum is incorrect — Kerio Control sends this alert when someone changes any configuration file.
• DHCP scope exhausted — Kerio Control sends this alert when there are no free IP addresses in the DHCP scope.
• Host connection limit reached — Kerio Control sends this alert when hosts in the local network reach the connection limit (typical when a Trojan horse or spyware has infected the host).
• Internet connectivity changed — Kerio Control sends this alert when the Internet connection fails and the system switches to a secondary line or vice versa.
• License expiration — Kerio Control sends this alert 7 days before the expiration of your Kerio Control license, Kerio Control Software Maintenance, Kerio ControlWeb Filter, or Kerio Antivirus software. The alert is sent daily until you renew the license.
• License quota exhausted — Kerio Control sends two alerts. The first email is sent when 90% of the quota is exhausted. The second email is sent when the quota is fully exhausted.
• Local Certification Authority expiration — Kerio Control sends this alert 7 days before the expiration of the local certification authority (CA). You should check the expiration date, create a new local CA, and distribute it to users' browsers. Select this option, if your users use HTTPS filtering because they have a local CA installed in their browsers.
• Low free disk space/memory warning — Kerio Control sends this alert when the Kerio Control host has less than 300 MB of free disk space and less than 200 MB of free memory available. Kerio Control needs enough disk space to be able to save logs, statistics, configuration settings, temporary files (e.g. an installation archive of a new version or a file that is currently scanned by an antivirus engine), etc. Whenever the Kerio Control administrator receives such an alert message, they should immediately take appropriate action.
• New version available — A new version of Kerio Control has been detected on the Kerio Technologies server during an update check.
• RAS line status changed — This alert is sent when a line (PPPoE, PPTP, or L2TPinterface) is dialed or hung up. The alert message includes the name of the line and type of dialing (manually from the administration interface, automatically in the configured time range, etc.).
• User transfer quota exceeded — A user has reached their daily, weekly, or monthly user transfer quota, and Kerio Control has responded by taking the designated action.

• VPN tunnel status changed — This alert works for the Kerio Control VPN tunnel and the IPsec VPN tunnel. Kerio Control sends the alert when the status of the tunnel is changed from Up to Down or from Down to Up.
• Virus detected — The antivirus engine has detected a virus in a file transmitted by HTTP, FTP, SMTP, or POP3.