Type
Index of Log Event Messages
Priority attack dropped Intrusion Detection Attack Alert 79 518
Ini Killer attack dropped Intrusion Detection Attack Alert 80 519
Smurf Amplification attack dropped Intrusion Detection Attack Alert 81 520
Possible port scan detected Intrusion Detection Attack Alert 82 521
Probable port scan detected Intrusion Detection Attack Alert 83 522
Failed to resolve name Network Maintenance Information 84
---IKE Responder: Accepting IPsec proposal (Phase 2)
VPN IKE User Activity Information 87
---IKE Responder: IPsec proposal does not match (Phase 2)
VPN IKE User Activity Warning 88 523
IKE negotiation complete. Adding IPsec SA.
(Phase 2)
VPN IKE User Activity Information 89
---Starting IKE negotiation VPN IKE User Activity Information 90
---Deleting IPsec SA for destination VPN IKE User Activity Information 91
---Deleting IPsec SA VPN IKE User Activity Information 92
---Diagnostic Code A Firewall Hardware System Error Error 93 611
Diagnostic Code B Firewall Hardware System Error Error 94 612
Diagnostic Code C Firewall Hardware System Error Error 95 613
Status GMS Maintenance Emergency 96
---#Web site hit Network Traffic Connection Traffic Information 97
---Connection Opened Network Traffic Connection Information 98
---Retransmitting DHCP DISCOVER. DHCP Client Maintenance Information 99 ---Retransmitting DHCP REQUEST
(Requesting).
DHCP Client Maintenance Information 100
---Retransmitting DHCP REQUEST (Renewing).
DHCP Client Maintenance Information 101
---Retransmitting DHCP REQUEST (Rebinding).
DHCP Client Maintenance Information 102
---Retransmitting DHCP REQUEST (Rebooting).
DHCP Client Maintenance Information 103
---Retransmitting DHCP REQUEST (Verifying). DHCP Client Maintenance Information 104
---Sending DHCP DISCOVER. DHCP Client Maintenance Information 105
---DHCP Server not available. Did not get any DHCP OFFER.
DHCP Client Maintenance Information 106
---Got DHCP OFFER. Selecting. DHCP Client Maintenance Information 107
---Sending DHCP REQUEST. DHCP Client Maintenance Information 108
---DHCP Client did not get ---DHCP ACK. DHCP Client Maintenance Information 109
---DHCP Client got NACK. DHCP Client Maintenance Information 110
---DHCP Client got ACK from server. DHCP Client Maintenance Information 111 ---DHCP Client is declining address offered by
the server.
DHCP Client Maintenance Information 112
---DHCP Client sending REQUEST and going to REBIND state.
DHCP Client Maintenance Information 113
---Log Event Message New Category Legacy Category Priority ID
SNMP Trap Type
Index of Log Event Messages
23
SonicOS Log Event Reference Guide
DHCP Client sending REQUEST and going to RENEW state.
DHCP Client Maintenance Information 114
---Sending DHCP REQUEST (Renewing). DHCP Client Maintenance Information 115 ---Sending DHCP REQUEST (Rebinding). DHCP Client Maintenance Information 116 ---Sending DHCP REQUEST (Rebooting). DHCP Client Maintenance Information 117 ---Sending DHCP REQUEST (Verifying). DHCP Client Maintenance Information 118 ---DHCP Client failed to verify and lease has
expired. Go to INIT state.
DHCP Client Maintenance Information 119
---DHCP Client failed to verify and lease is still valid. Go to BOUND state.
DHCP Client Maintenance Information 120
---DHCP Client got a new IP address lease. DHCP Client Maintenance Information 121
---Sending DHCP RELEASE. DHCP Client Maintenance Information 122
---Access attempt from host without Anti-Virus agent installed
Security Services Maintenance Information 123
---Anti-Virus agent out-of-date on host Security Services Maintenance Information 124
---Received AV Alert: %s Security Services Maintenance Warning 125 524
Starting PPPoE discovery PPPoE Maintenance Information 127
---PPPoE LCP Link Up PPPoE Maintenance Information 128
---PPPoE LCP Link Down PPPoE Maintenance Information 129
---PPPoE terminated PPPoE Maintenance Information 130
---PPPoE Network Connected PPPoE Maintenance Information 131
---PPPoE Network Disconnected PPPoE Maintenance Information 132
---PPPoE discovery process complete PPPoE Maintenance Information 133 ---PPPoE starting CHAP Authentication PPPoE Maintenance Information 134 ---PPPoE starting PAP Authentication PPPoE Maintenance Information 135 ---PPPoE CHAP Authentication Failed PPPoE Maintenance Information 136 ---PPPoE PAP Authentication Failed PPPoE Maintenance Information 137
---Wan IP Changed Firewall Event System Error Warning 138 636
XAUTH Succeeded with VPN client VPN Client User Activity Information 139 ---XAUTH Failed with VPN client,
Authentication failure
VPN Client User Activity Error 140
---XAUTH Failed with VPN client, Cannot Contact RADIUS Server
VPN Client User Activity Information 141
---Log Debug Firewall Event Debug Error 142
---Add an attack message Firewall Event Attack Error 143 525
Primary firewall has transitioned to Active High Availability Maintenance Alert 144 ---Backup firewall has transitioned to Active High Availability Maintenance Alert 145 ---Primary firewall has transitioned to Idle High Availability System Error Alert 146 614 Backup firewall has transitioned to Idle High Availability Maintenance Alert 147 ---Primary missed heartbeats from Backup High Availability System Error Error 148 615 Backup missed heartbeats from Primary High Availability System Error Error 149 616 Primary received error signal from Backup High Availability System Error Error 150 617 Backup received error signal from Primary High Availability System Error Error 151 618 Backup firewall being preempted by Primary High Availability System Error Error 152 619
Log Event Message New Category Legacy Category Priority ID
SNMP Trap Type
Index of Log Event Messages
Primary firewall preempting Backup High Availability System Error Error 153 620 Active Backup detects Active Primary:
Backup going Idle
High Availability Maintenance Information 154
---Imported HA hardware ID did not match this firewall
High Availability Maintenance Information 155
---Discovered HA Backup Firewall High Availability Maintenance Information 156 ---HA Peer Firewall Synchronized High Availability Maintenance Information 157 ---Error synchronizing HA peer firewall (%s) High Availability System Error Error 158 662 Received AV Alert: Your Network Anti-Virus
subscription has expired. %s
Security Services Maintenance Warning 159 526
Primary received heartbeat from wrong source
High Availability Maintenance Information 160
---Backup received heartbeat from wrong source
High Availability Maintenance Information 161
---HA packet processing error High Availability Maintenance Information 162 ---Heartbeat received from incompatible source High Availability Maintenance Information 163
---Diagnostic Code F Firewall Hardware System Error Error 164 621
Forbidden E-Mail attachment disabled Intrusion Detection Attack Alert 165 527 PPPoE PAP Authentication success. PPPoE Maintenance Information 166 ---PPPoE PAP Authentication Failed. Please
verify PPPoE username and password
PPPoE Maintenance Information 167
---Disconnecting PPPoE due to traffic timeout PPPoE Maintenance Information 168 ---No response from ISP Disconnecting
PPPoE.
PPPoE Maintenance Information 169
---Backup going Active in preempt mode after reboot
High Availability System Error Error 170 622
VPN Log Debug VPN IKE Debug Information 172
---TCP connection from LAN denied Network Access LAN TCP Notice 173
---UDP packet from LAN dropped Network Access LAN UDP | LAN TCP
Notice 174
---ICMP packet from LAN dropped Network Access LAN ICMP | LAN TCP
Notice 175
---Probable TCP FIN scan detected Intrusion Detection Attack Alert 177 528 Probable TCP XMAS scan detected Intrusion Detection Attack Alert 178 529 Probable TCP NULL scan detected Intrusion Detection Attack Alert 179 530
IPsec Replay Detected VPN IPsec Attack Alert 180 531
TCP FIN packet dropped Network Debug Debug 181
---Received a path MTU icmp message from router/gateway
Network User Activity Information 182
---Problem loading the URL List; Appliance not registered.
Security Services System Error Error 183 623
Problem loading the URL List; Subscription expired.
Security Services System Error Error 184 624
Problem loading the URL List; Try loading it again.
Security Services System Error Error 185 625
Log Event Message New Category Legacy Category Priority ID
SNMP Trap Type
Index of Log Event Messages
25
SonicOS Log Event Reference Guide
Problem loading the URL List; Retrying later. Security Services System Error Error 186 626 Problem loading the URL List; Flash write
failure.
Security Services System Error Error 187 627
Received a path MTU icmp message from router/gateway
Network User Activity Information 188
---The loaded content URL List has expired. Security Services System Error Error 190 628 Error setting the IP address of the backup,
please manually set to backup LAN IP
High Availability System Error Error 191 629
Error updating HA peer configuration High Availability System Error Error 192 630 Fraudulent Microsoft certificate found;
access denied
Intrusion Detection Attack Error 193 532
VPN TCP SYN VPN VPN Statistics Information 194
---VPN TCP FIN VPN VPN Statistics Information 195
---VPN TCP PSH VPN VPN Statistics Information 196
---Content filter subscription expired. Security Services System Error Error 197 631 New firmware available. Firewall Event Maintenance Information 198 ---CLI administrator login allowed Authenticate
Access
User Activity Information 199
---CLI administrator login denied due to bad credentials
Authenticate Access
User Activity Warning 200
---L2TP Tunnel Negotiation Started L2TP Client Maintenance Information 201 ---L2TP Session Negotiation Started L2TP Client Maintenance Information 202 ---L2TP Max Retransmission Exceeded L2TP Client Maintenance Information 203
---L2TP Tunnel Established L2TP Client Maintenance Information 204
---L2TP Tunnel Disconnect from Remote L2TP Client Maintenance Information 205
---L2TP Session Established L2TP Client Maintenance Information 206
---L2TP Session Disconnect from Remote L2TP Client Maintenance Information 207 ---L2TP PPP Negotiation Started L2TP Client Maintenance Information 208
---L2TP LCP Down L2TP Client Maintenance Information 209
---L2TP PPP Session Up L2TP Client Maintenance Information 210
---L2TP PPP Down L2TP Client Maintenance Information 211
---L2TP PPP Authentication Failed L2TP Client Maintenance Information 212
---L2TP LCP Up L2TP Client Maintenance Information 213
---L2TP Disconnect Initiated by the User L2TP Client Maintenance Information 214 ---Disconnecting L2TP Tunnel due to traffic
timeout
L2TP Client Maintenance Information 215
---L2TP Connect Initiated by the User L2TP Client Maintenance Information 216
---L2TP PPP link down L2TP Client Maintenance Information 217
---Primary WAN link down, ---Primary going Idle High Availability Maintenance Information 218 ---Backup WAN link down, Primary going
Active
High Availability System Error Error 219 633
Primary WAN link down, Backup going Active
High Availability System Error Error 220 634
Primary WAN link up, preempting Backup High Availability Maintenance Information 221
---Log Event Message New Category Legacy Category Priority ID
SNMP Trap Type
Index of Log Event Messages
DHCP RELEASE relayed to Central Gateway
DHCP Relay Maintenance Information 222
---DHCP lease relayed to local device DHCP Relay Maintenance Information 223 ---DHCP RELEASE received from remote
device
DHCP Relay Debug Information 224
---DHCP lease relayed to remote device DHCP Relay Debug Information 225 ---DHCP lease to LAN device conflicts with
remote device, deleting remote IP entry
DHCP Relay Maintenance Information 226
---WARNING: DHCP lease relayed from Central Gateway conflicts with IP in Static Devices list
DHCP Relay Maintenance Information 227
---DHCP lease dropped. Lease from Central Gateway conflicts with Relay IP
DHCP Relay Maintenance Warning 228
---IP spoof detected on packet to Central Gateway, packet dropped
DHCP Relay Attack Error 229 533
Request for Relay IP Table from Central Gateway
DHCP Relay Maintenance Information 230
---Requesting Relay IP Table from Remote Gateway
DHCP Relay Maintenance Information 231
---Sent Relay IP Table to Central Gateway DHCP Relay Maintenance Information 232 ---Obtained Relay IP Table from Remote
Gateway
DHCP Relay Maintenance Information 233
---Failed to synchronize Relay IP Table DHCP Relay System Error Warning 234 632 VPN zone administrator login allowed Authenticate
Access
User Activity Information 235
---WAN zone administrator login allowed Authenticate Access
User Activity Information 236
---VPN zone remote user login allowed Authenticate Access
User Activity Information 237
---WAN zone remote user login allowed Authenticate Access
User Activity Information 238
---NAT Discovery : Peer IPsec Security Gateway behind a NAT/NAPT Device
VPN IKE User Activity Information 239
---NAT Discovery : Local IPsec Security Gateway behind a NAT/NAPT Device
VPN IKE User Activity Information 240
---NAT Discovery : No ---NAT/NAPT device detected between IPsec Security gateways
VPN IKE User Activity Information 241
---NAT Discovery : Peer IPsec Security Gateway doesn't support VPN NAT Traversal
VPN IKE User Activity Information 242
---User login denied - RADIUS authentication failure
RADIUS User Activity Information 243
---User login denied - RADIUS server timeout RADIUS User Activity Warning 244 ---User login denied - RADIUS configuration
error
RADIUS User Activity Warning 245
---Log Event Message New Category Legacy Category Priority ID
SNMP Trap Type
Index of Log Event Messages
27
SonicOS Log Event Reference Guide
User login denied - User has no privileges for login from that location
Authenticate Access
User Activity Information 246
---IPsec packet from an illegal host VPN IPsec Maintenance Information 247 ---Forbidden E-Mail attachment deleted Intrusion Detection Attack Error 248 534 IKE Responder: Mode %d - not tunnel mode VPN IKE User Activity Warning 249 535 IKE Responder: No matching Phase 1 ID
found for proposed remote network
VPN IKE User Activity Warning 250 536
IKE Responder: Proposed remote network is 0.0.0.0 but not DHCP relay nor default route
VPN IKE User Activity Warning 251 537
IKE Responder: No match for proposed remote network address
VPN IKE User Activity Warning 252 538
IKE Responder: Default LAN gateway is set but peer is not proposing to use this SA as a default route
VPN IKE User Activity Warning 253 539
IKE Responder: Tunnel terminates outside firewall but proposed local network is not NAT public address
VPN IKE User Activity Warning 254 540
IKE Responder: Tunnel terminates inside firewall but proposed local network is not inside firewall
VPN IKE User Activity Warning 255 541
IKE Responder: Tunnel terminates on DMZ but proposed local network is on LAN
VPN IKE User Activity Warning 256 542
IKE Responder: Tunnel terminates on LAN but proposed local network is on DMZ
VPN IKE User Activity Warning 257 543
IKE Responder: AH Perfect Forward Secrecy mismatch
VPN IKE User Activity Warning 258 544
IKE Responder: ESP Perfect Forward Secrecy mismatch
VPN IKE User Activity Warning 259 545
IKE Responder: Algorithms and/or keys do not match
VPN IKE User Activity Warning 260 546
Administrator logged out Authenticate Access
User Activity Information 261
---Administrator logged out - inactivity timer expired
Authenticate Access
User Activity Information 262
---User logged out Authenticate
Access
User Activity Information 263
---User logged out - max session time exceeded
Authenticate Access
User Activity Information 264
---User logged out - inactivity timer expired Authenticate Access
User Activity Information 265
---NAT device may not support IPsec AH passthrough
VPN IPsec Maintenance Information 266
---TCP Xmas Tree dropped Intrusion Detection Attack Alert 267 547
CFL auto-download disabled, time problem detected
Security Services Maintenance Information 268
---Requesting CRL from VPN PKI User Activity Information 269
---Log Event Message New Category Legacy Category Priority ID
SNMP Trap Type
Index of Log Event Messages
CRL loaded from VPN PKI User Activity Information 270
---Failed to get CRL from VPN PKI User Activity Alert 271
---Not enough memory to hold the CRL VPN PKI User Activity Warning 272
---Connection timed out VPN PKI User Activity Alert 273
---Cannot connect to the CRL server VPN PKI User Activity Alert 274
---Unknown reason VPN PKI User Activity Error 275
---Failed to Process CRL from VPN PKI User Activity Alert 276
---Bad CRL format VPN PKI User Activity Alert 277
---Issuer match failed VPN PKI User Activity Alert 278
---Certificate on Revoked list(CRL) VPN PKI User Activity Alert 279
---No Certificate for VPN PKI User Activity Alert 280
---PPP Dial-Up: Dialing: %s PPP Dial Up User Activity Information 281 ---PPP Dial-Up: No dialtone detected - check
phone-line connection
PPP Dial Up User Activity Information 282
---PPP Dial-Up: No link carrier detected - check phone number
PPP Dial Up User Activity Information 283
---PPP Dial-Up: Dialed number is busy PPP Dial Up User Activity Information 284 ---PPP Dial-Up: Dialed number did not answer PPP Dial Up User Activity Information 285 ---PPP Dial-Up: Connected at %s bps - starting
PPP
PPP Dial Up User Activity Information 286
---PPP Dial-Up: Unknown dialing failure PPP Dial Up User Activity Information 287 ---PPP Dial-Up: Link carrier lost PPP Dial Up User Activity Information 288
---PPP: Authentication successful PPP --- Information 289
---PPP: PAP Authentication failed - check username / password
PPP --- Information 290
---PPP: CHAP authentication failed - check username / password
PPP --- Information 291
---PPP: MS-CHAP authentication failed - check username / password
PPP --- Information 292
---PPP: Starting MS-CHAP authentication PPP --- Information 293
---PPP: Starting CHAP authentication PPP --- Information 294
---PPP: Starting PAP authentication PPP --- Information 295
---PPP Dial-Up: ---PPP negotiation failed - disconnecting
PPP Dial Up User Activity Information 296
---PPP Dial-Up: Idle time limit exceeded - disconnecting
PPP Dial Up User Activity Information 297
---PPP Dial-Up: Failed to get IP address PPP Dial Up User Activity Information 298 ---PPP Dial-Up: Received new IP address PPP Dial Up User Activity Information 299 ---PPP Dial-Up: ---PPP link established PPP Dial Up User Activity Information 300 ---PPP Dial-Up: ---PPP link down PPP Dial Up User Activity Information 301 ---PPP Dial-Up: Shutting down link PPP Dial Up User Activity Information 302 ---PPP Dial-Up: Initialization : %s PPP Dial Up User Activity Information 303 ---PPP Dial-Up: User requested disconnect PPP Dial Up User Activity Information 304 ---PPP Dial-Up: User requested connect PPP Dial Up User Activity Information 305
---Log Event Message New Category Legacy Category Priority ID
SNMP Trap Type
Index of Log Event Messages
29
SonicOS Log Event Reference Guide
PPP Dial-Up: Connect request canceled PPP Dial Up User Activity Information 306 ---The network connection in use is %s WAN Failover System Error Warning 307 639 L2TP Server : L2TP Tunnel Established. L2TP Server Maintenance Information 308 ---L2TP Server : ---L2TP Session Established. L2TP Server Maintenance Information 309 ---L2TP Server : ---L2TP PPP Session
Established.
L2TP Server Maintenance Information 310
---L2TP Server: RADIUS/LDAP reports Authentication Failure
L2TP Server Maintenance Information 311
---L2TP Server: Local Authentication Failure L2TP Server Maintenance Information 312 ---L2TP Server: RADIUS/LDAP server not
assigned IP address
L2TP Server Maintenance Information 313
---L2TP Server: No IP address available in the Local IP Pool
L2TP Server Maintenance Information 314
---L2TP Server: ---L2TP Tunnel Disconnect from the Remote.
L2TP Server Maintenance Information 315
---L2TP Server: ---L2TP Session Disconnect from the Remote.
L2TP Server Maintenance Information 316
---L2TP Server: ---L2TP Remote terminated the PPP session
L2TP Server Maintenance Information 317
---L2TP Server: Local Authentication Success.
L2TP Server Maintenance Information 318
---L2TP Server: RADIUS/LDAP Authentication Success
L2TP Server Maintenance Information 319
---L2TP Server: Keep alive Failure. Closing Tunnel
L2TP Server Maintenance Information 320
---PPP Dial-Up: Manual intervention needed.
Check Primary Profile or Profile details
PPP Dial Up User Activity Information 321
---PPP Dial-Up: Trying to failover but Primary Profile is manual
PPP Dial Up User Activity Information 322
---PPP Dial-Up: Startup without Ethernet cable, will try to dial on outbound traffic
PPP Dial Up User Activity Information 323
---PPP Dial-Up: Dial initiated by %s PPP Dial Up Maintenance Information 324 ---The current WAN interface is not ready to
route packets.
Firewall Event System Error Error 325 635
Probing failure on %s WAN Failover System Error Alert 326 637
PPP Dial-Up: Maximum connection time exceeded - disconnecting
PPP Dial Up User Activity Information 327
---Administrator name changed Authenticate Access
Maintenance Information 328
---User login failure rate exceeded - logins from user IP address denied
Authenticate Access
Attack Error 329 561
PPP Dial-Up: The profile in use disabled VPN networking.
PPP Dial Up Maintenance Information 330
---PPP Dial-Up: VPN networking restored. PPP Dial Up Maintenance Information 331
---%s Ethernet Port Up Firewall Event System Error Warning 332 640
%s Ethernet Port Down Firewall Event System Error Error 333 641
Log Event Message New Category Legacy Category Priority ID
SNMP Trap Type
Index of Log Event Messages
L2TP Server: Call Disconnect from Remote. L2TP Server Maintenance Information 334 ---L2TP Server: Tunnel Disconnect from
Remote.
L2TP Server Maintenance Information 335
---L2TP Server : Deleting the Tunnel L2TP Server Maintenance Information 336 ---L2TP Server : Deleting the ---L2TP active
Session
L2TP Server Maintenance Information 337
---L2TP Server : Retransmission Timeout, Deleting the Tunnel
L2TP Server Maintenance Information 338
---NAT translated packet exceeds size limit, packet dropped
Network Debug Debug 339
---HTTP management port has changed Firewall Event Maintenance Information 340 ---HTTPS management port has changed Firewall Event Maintenance Information 341 ---IKE Responder: Mode %d - not transport
mode. Xauth is required but not supported by peer.
VPN IKE Debug Warning 342
---L2TP Server : Access from ---L2TP VPN Client Privilege not enabled for Radius Users.
L2TP Server Maintenance Information 343
---L2TP Server : User Name authentication Failure locally.
L2TP Server Maintenance Information 344
---IKE Responder: Tunnel terminates outside firewall but proposed remote network is not NAT public address
VPN IKE User Activity Warning 345 548
IKE Initiator: Start Quick Mode (Phase 2). VPN IKE User Activity Information 346 ---Port configured to receive IPsec protocol
ONLY; drop packet received in the clear
Network Access TCP | UDP | ICMP Warning 347
---Imported VPN SA is invalid - disabled Firewall Event Maintenance Warning 348 ---IPsec SA lifetime expired. VPN IPsec User Activity Information 349
---IKE SA lifetime expired. VPN IKE User Activity Information 350
---IKE Initiator: Start Main Mode negotiation (Phase 1)
VPN IKE User Activity Information 351
---IKE Responder: Received Quick Mode Request (Phase 2)
VPN IKE User Activity Information 352
---IKE Initiator: Main Mode complete (Phase 1) VPN ---IKE User Activity Information 353 ---IKE Initiator: Aggressive Mode complete
---IKE Initiator: Main Mode complete (Phase 1) VPN ---IKE User Activity Information 353 ---IKE Initiator: Aggressive Mode complete