Cisco Secure Firewall ASA Series Syslog Messages

Contents

* - 4 - A - B - C - D - E - F - H - I - L - M - N - O - P - R - S - T - U - V - W - X

Index

*

*** 1

4

4GE SSM 1 2

A

AAA

authentication 1 2 3 4

authorization 1

messages 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24

server 1 2 3 4 5 6 7 8 9

ABR

without backbone area 1

access denied

URL 1

access lists

See ACLs 1

access permittedUDP

access permittedTCP

access permitted 1

access requestedTCP

access requested 1

access-list command

deny-flow-max optionaccess-list deny-flow-max command 1

interval option 1

omitting 1

access-list commandaccess-list commandaccess-list commandaccess-list command

to permit traffic on UDP port 53 1

to permit traffic on UDP port 53access-list command 1 2 3

ACLs

ACL_ID 1 2

compilation out of memory 1

configuration error 1

crypto map 1

deny 1

deny-flows 1

empty ACL downloaded 1

failed check 1

logging matches 1

no ACL configured 1

packet denied 1

parsing error 1

peer context ID 1

peer context IDaccess-list commandaccess-list commandaccess-list command

to permit traffic on UDP port 53 1

peer IP address not set 1

proxy ID mismatch 1

SoftNP error 1 2

split tunneling policy 1

unsupported format 1

WebVPN

ACL ID not found 1

parse error 1 2 3

user authorization failure 1

address translation slots 1

no more available 1

no more available address translation slots, no more available 1

anchor count negative 1

area border router

See ABR 1

ARP packet mismatch 1

ARP poisoning attackattacks

ARP poisoning 1

ARP spoofing attack 1

asymmetric routing 1

attacks

ARP spoofing 1 2

DoS 1

spoofing 1 2 3

suspicious e-mail address pattern 1

Auth from IP address/port to IP address/port failed 1

Auth start for user 1

Authen Session End 1

authentication

failed 1

request 1

request succeeds 1

response 1

authorization

command 1

user 1

user denied 1

Auto Update URL unreachable 1

B

backup server list

downloadedEasy VPN Remote

backup server list

errorEasy VPN Remote

backup server list

bridge table

full 1

broadcast, invalid source address 1

built H245 connection 1

C

cannot specify PAT host 1

certificate data could not be verified 1

classes, logging

message class variables 1

types 1

clear command

local-host option 1

config commandconfig commandconfig command 1

configuration

erase 1

replication

beginning 1

failed 1

status changed 1 2

configure commandconfigure commandconfigure command 1

connection limit exceeded 1 2

connection limit exceededTCP

connection limit exceeded 1 2

CTIQBE

connection object pre-allocation 1

unsupported version 1

D

deny

inbound from outside 1

inbound ICMP 1

inbound UDP 1

inbound UDP due to query/response 1

IP from address to address 1

IP spoof 1

self route 1

TCP (no connection) 1

device pass through

disabledEasy VPN Remote

device pass through

enabledEasy VPN Remote

device pass through

DNS HINFO request attackattacks

DNS HINFO request 1

DNS query or response is denied 1

DNS request for all records attackattacks

DNS request for all records 1

DNS server too slow 1

DNS zone transfer attackattacks

DNS zone transfer 1

DNS zone transfer from high port attackattacks

DNS zone transfer from high port 1

DoS attackattacks

DoS 1 2 3

E

Easy VPN Remote

SUA

disabled 1

embryonic limit exceeded 1

F

failover

bad cable 1

block allocation failed 1

cable communication failed 1

cable not connected 1

cable status 1

configuration replication 1

configuration replication failed 1

continuous failovers 1 2

failover active command 1

failover command message dropped 1

incompatible software on mate 1

interface link down 1

LAN interface down 1

license mismatch with mate 1

lost communications with mate 1

mate card configuration mismatch 1

mate has different chassis 1

mate may be disabled 1

operational mode mismatch with mate 1

peer LAN link down 1

replication interrupted 1

show failover command 1 2

standby unit failed to sync 1

stateful error 1

stateful failover 1 2 3 4 5 6 7 8

VPN failover

buffer error 1

client being disabled 1

CTCP flow handle error 1

failed to allocate chunk 1

failed to initialize 1

memory allocation error 1

non-block message not sent 1

registration failure 1

SDI node secret file failed to synchronize 1

standby unit received corrupted message from active unit 1

state update message failure 1

timer error 1

trustpoint certification failure 1

trustpoint name not found 1

unable to add to message queue 1

version control block failure 1

failover command 1

active option 1

active optionfailover command

active optionfailover command

failover commandfailover command 1

failover messages 1 2 3 4

failover messagestesting

interface 1

filter allow command 1

filter command

allow optionfilter command

allow option 1

Flood Defender 1

floodguard commandfloodguard commandfloodguard command 1

flow control error 1

fragmented ICMP traffic attackattacks

fragmented ICMP traffic 1

FTP

data connection failed 1

H

H.225 1

H.245 connection

foreign addressH.245H.245 1

H.323

unsupported packet version 1

H.323H.323

back-connection, preallocated 1

handle not allocated 1

hello packet with duplicate router IDOSPF

hello packet with duplicate router ID 1

host limit 1

host move 1

hostile event 1

hostile eventhostile event

firewall circumventedhostile eventhostile event 1

HTTPS process limit 1

I

ICMP

packet deniedconduit command

permit ICMP option 1

packet denieddropping echo request 1

IDB initializatrionOSPF

IDB initializatrion 1

inbound TCP connection denied 1

inspect ESMTP command 1

insufficient memory

error caused by 1 2

interface

virtualinterface

PPP virtualvirtual interfacePPP virtual interface 1

zero bandwidthbandwidth

reported as zero 1

Internet phone, detecting use ofdetecting use of Internet phone 1

invalid character replaced in e-mail address 1

invalid source addresses 1

IP address

DHCP client 1

DHCP server 1

IP fragment attackattacks

IP fragment 1

IP fragments overlap attackattacks

IP fragments overlap 1

IP impossible packet attackattacks

IP impossible packet 1

IP route counter decrement failure 1

IP routing table

attackattacks

IP routing table 1 2

creation error 1

limit exceeded 1

limit warning 1

OSPF inconsistencyOSPF

IP routing table inconsistency 1

ip verify reverse-path command 1

ip verify reverse-path commandip verify reverse-path command 1

IPSec

connection entries 1

connections 1 2 3 4 5 6 7 8 9 10 11 12

failure 1

cTCP tunnel 1

encryption 1

fragmentation policy ignored 1

negotiation 1

over UDP 1 2

overTCP 1

packet triggered IKE 1

proposal

SA 1

unsupported 1

protocol 1

proxy mismatch 1

rekeying duration 1 2 3

request rejected 1

SA 1 2 3 4 5 6 7

proposal 1 2

tunnels 1 2 3 4 5 6 7 8 9 10 11

L

L2TP

tunnel 1

land attackattacks

land 1

large ICMP traffic attackattacks

large ICMP traffic 1

Leaving ALLOW mode, URL Server 1

link state advertisement

See LSA 1

link status Up or Down 1

load balancing cluster

disconnectedEasy VPN Remote

load balancing cluster

redirectedEasy VPN Remote

load balancing cluster

logging

classes

types 1

loopback network, invalid source address 1

lost failover communications with mate 1

LSA

default with wrong maskOSPF

LSA

invalid typeOSPF

LSA

M

MAC address mismatch 1

man in the middle attackattacks

man in the middle 1

memory

block depleted 1

corruptionOSPF

checksum error 1

insufficientinsufficient memory 1

leakLSA

not foundOSPF

lowlow memorylow memory

failed operation 1

message block alloc failed 1

messages

Mail Guard 1

SSH 1

stateful failover 1 2 3 4 5 6 7 8 9

variables used in 1

messages, logging

classes

list of 1

Microsoft Point-to-Point Encryption

See MPPE 1

MPPE

encryption policy setup 1

MS-CHAPMS-CHAP

authentication 1

N

nat command 1

no associated connection within connection tableTCP

no associated connection in table 1

no translation group foundpacket

not matched outbound NAT rules 1

O

OSPF

ABR without backbone area 1

configuration change 1

database request from unknown neighborOSPF

database description from unknown neighborOSPF

invalid packet 1

neighbor state changed 1

network range area changed 1

packet of invalid length 1

out of address translation slots! 1

outbound deny commandoutbound deny command 1

P

packet

denied 1 2 3 4

PAT

address 1 2 3

global address 1

host unspecified 1

pdb index error 1

ping of death attackattacks

ping of death 1

PPTP

packet out of sequence 1

tunnel 1 2

XGRE packet 1

preallocate H323 UDP back connection 1

privilege level, changed 1 2

proxied RPC request attackattacks

proxied RPC request 1

R

RADIUS authentication 1

RCMD, back connection failed 1

reload commandreload commandreload command 1 2

request discardedUDP

request discardedTCP

request discarded 1

router ID allocation failureOSPF

router ID allocation failure 1

rsh commandrsh commandrsh command 1

S

security

breach 1

context

added 1

context cannot be determined 1

removed 1

self route 1

SETUP message 1

Severity level 4

ASA-4-447001 1

show command

blocks optionshow command

blocks option 1

failover option 1 2 3

local-host option 1

outbound optionshow command

outbound option 1

static optionshow command

static option 1

static optionshow static command 1

version option 1

shuns 1

SIP connection 1

skinny connection 1

SMTP 1

software version mismatch 1

split network entry duplicateEasy VPN Remote

split network entry duplicate 1

spoofing attackattacks

spoofing 1 2 3 4

SSH 1

SSM 4GE 1 2

statd buffer overflow attackattacks

statd buffer overflow 1

stateful failover 1 2 3 4 5

SUA

disabledEasy VPN Remote

SUA

enabledEasy VPN Remote

SUA

SYN

attackattacks

SYN 1

SYNSYN

flag 1

system log messages

classes 1

T

TCP

connections 1

translation creation failedUDP

translation creation failedICMP

TCP FIN only flags attackattacks

TCP FIN only flags 1

TCP NULL flags attackattacks

TCP NULL flags 1

TCP state-bypass connection creation 1

TCP state-bypass connection teardown 1

TCP SYN+FIN flags attackattacks

TCP SYN+FIN flags 1

timeout uauth commandtimeout uauth command 1

timeouts, recommended values 1

too many connections on staticconnection limit exceeded 1

tunnel, PPTP 1

U

UDP

bomb attackattacks

UDP bomb 1

chargen DoS attackattacks

UDP chargen DoS 1

connections 1

messages 1

packet 1

snork attackattacks

UDP snork 1

unsupported application 1

URL

buffer block space 1

filtering, disabledweb requests, unfiltered 1

Server 1

user authentication

disabledEasy VPN Remote

user authentication

enabledEasy VPN Remote

user authentication

error 1

user logged out 1

username

created 1

deleted 1

V

variables

in messages 1

in messagesmessages

variables used in 1

list of 1

virtual linksOSPF

virtual linksrouter-ID resetOSPF

router-id resetOSPF

vpdn group command 1

VPN

peer limit 1

tunnel 1

VPN failover

client being disabled 1

CTCP flow handle error 1

failed to allocate chunk 1

failed to initialize 1

memory allocation error 1

non-block message not sent 1

registration failure 1

SDI node secret file failed to synchronize 1

standby unit received corrupted message from active unit 1

state update message failure 1

timer error 1

trustpoint certification failure 1

trustpoint name not found 1

unable to add to message queue 1

version control block failure 1

W

Websense server 1 2

write command 1

erase option 1

standby command 1

standby option 1

write commandwrite command 1

write erase commandwrite erase command 1

X

XAUTH enabledEasy VPN Remote

XAUTH enabled 1

XGRE, packet with invalid protocol field 1