Introduction

NCF performs many different functions as it protects your computer from attacks. Each action it takes is referred to as an event, and every event is logged.

The NCF Log Viewer makes it easy for you to view these event logs. The event logs show you the history of every operation NCF performed, including the following:

• Every application and connection that was allowed or blocked by NCF.
• The specific activities of each NCF plug-in.
• The start of every program and all changes made to policies, configuration settings, and passwords.

The following are the main features of the NCF log system:

• One mouse click to view the entire log or a selection of specific events. For details, see Displaying Logs.
• Customized display of the logs. You can view only the information you need by selecting columns and limiting their parameters or by sorting by any parameter.
• Preset selections of events can be displayed. You can easily switch between connections blocked during the last ten minutes, for instance, or all connections allowed today. You can also create, edit, and remove selections of events to be displayed. For details, see Working with Logs and Filters.
• Filters can be added to organize the data displayed.
• Logs can be copied or exported according to presets, filters, or selected records.
• Log files can be cleared to save hard drive space.
• Customized SQL queries can be created for specific monitoring purposes.
• Logs can also be browsed via the Microsoft Management Console (MMC) snap-in.