Event Log Notification Demotion from Trusted to Untrusted
You can enable your Oracle® Enterprise Session Border Controller to provide event log notification (a syslog message) any time it demotes an endpoint from trusted to untrusted. The log message contains this data: IP address of the demoted endpoint, the endpoint’s configured trust level, and the reason for demotion.
To use this feature, the intrusion detection system (IDS) Reporting license must be installed and your media manager configuration must be enabled to send the log messages. This feature is enabled with the syslog-on-demote-to-untrusted parameter in the media manager.