Event Log Notification Demotion from Trusted to Untrusted
You can enable your Oracle® Enterprise Session Border Controller to provide event log notification (a syslog message) any time it demotes an endpoint from trusted to untrusted. The log message contains this data: IP address of the demoted endpoint, the endpoint’s configured trust level, and the reason for demotion. This feature is enabled with the syslog-on-demote-to-untrusted parameter in the media manager.