TMG - firewall action log values

Microsoft Forefront TMG 2010 – Firewall Action Log Values

Value	Description
NotLogged	No action was logged.
Bind	The Firewall service associated a local address with a socket.
Listen	The Firewall service placed a socket in a state in which it listens for an incoming connection.
GHBN	Get host by name request. The Firewall service retrieved host information corresponding to a host name.
GHBA	Get host by address request. The Firewall service retrieved host information corresponding to a network address.
Redirect_Bind	The Firewall service enabled a connection using a local address associated with a socket.
Establish	The Firewall service established a session.
Terminate	The Firewall service terminated a session.
Denied	The action requested was denied.
Allowed	The action requested was allowed.
Failed	The action requested failed.
Intermediate	The action was intermediate.
Successful_Connection	The Firewall service was successful in establishing a connection to a socket.
Unsuccessful_Connection	The Firewall service was unsuccessful in establishing a connection to a socket.
Disconnection	The Firewall service closed a connection on a socket.
User_Cleared_Quarantine	The Firewall service cleared a quarantined virtual private network (VPN) client.
Quarantine_Timeout	The Firewall service disqualified a quarantined VPN client after the time-out period elapsed.