Event

Web Console

Syslog

Anti-Malware Events

All events

Web Reputation Events

Dangerous

Highly Suspicious

Suspicious

Untested

Blocked by Administrator

Firewall Events

Deny

Log Only

Intrusion Prevention Events

Critical

High

Medium

Low

Protocol Error

Integrity Monitoring Events

Critical

High

Medium

Low

Log Inspection Events

Critical (12-15)

High (8-11)

Medium (4-7)

Low (0-3)

System Events

Error

Warning

Info

Comparison of the severity level shown between the Deep Security web console and the syslog file

Product / Version includes:

Deep Security 20.0 , Deep Security 11.0 , Deep Security 10.2 , Deep Security 10.1 , Deep Security 10.0 , Deep Security 12.0 , Cloud One - Endpoint and Workload Security All , Deep Security 10.3

Last updated: 2025/05/08

Solution ID: KA-0007074

Category: Configure

Summary

Know the equivalent value of the severity for an event shown on the Deep Security web console as compared to the syslog entry.

The table below shows the events in the web console and their corresponding value in syslog:

The feature Deep Packet Inspection (DPI) has been changed to Intrusion Prevention (IPS) in Deep Security 9.0 and above.

Event	Web Console	Syslog
Anti-Malware Events	All events	6
Web Reputation Events	Dangerous	8
	Highly Suspicious	7
	Suspicious	6
	Untested	5
	Blocked by Administrator	5
Firewall Events	Deny	5
Firewall Events	Log Only	0
Intrusion Prevention Events	Critical	10
	High	8
	Medium	6
	Low	3
	Protocol Error	5
Integrity Monitoring Events	Critical	10
	High	8
	Medium	6
	Low	3
Log Inspection Events	Critical (12-15)	10
	High (8-11)	8
	Medium (4-7)	6
	Low (0-3)	3
System Events	Error	8
	Warning	6
	Info	3

Was this article helpful?

Featured

Automation Center

Education Portal

Online Help Center

Service Status

TrendConnect

Comparison of the severity level shown between the Deep Security web console and the syslog file

Comparison of the severity level shown between the Deep Security web console and the syslog file

Product / Version includes:

Summary