Chapter 5 Events: Logs, Traffic Streams, Reports

Table 5–5: Firewall Session Log Field Descriptions (Continued)

Column

Description

 

 

 

 

Bytes

For Session End events, this field contains the number of bytes transferred

 

during each session. For web request events, this field indicates the number of

 

bytes downloaded from the HTTP GET.

 

 

Message

Message text associated with the firewall session event:

 

Web request — no message

 

Session start — Regular session start, Secondary session

 

start

 

Session end — Session ended because of inactivity, Session

 

ended because of inactivity

VPN Log

The VPN log captures diagnostic messages relating to VPN tunnels to help troubleshoot and monitor VPN configurations. Each log entry is tab-delimited. The log fields are populated based on the type of event being logged. If a field is not used, a tab is inserted to properly position the data in the next field.

To maintain a complete history of entries and provide a backup, you can configure the X family device to send VPN Log entries to a syslog server from the Syslog Servers page. For details, see “Syslog Servers” on page 242.

A VPN log entry contains the following fields:

Table 5–6: VPN Log Field Descriptions

Column

Description

 

 

 

 

Log ID

A system-assigned Log ID number

 

 

Log Entry

A date and time stamp in the format year-month-date hour:minute:second

Time

 

 

 

Severity

The severity of the event, which is INFO.

 

 

Src IP:Port

Source address — the IP address and port for the event. This is a string and the

 

value may be this-device, indicating that the X family device sent the message

 

itself.

 

 

Dest IP:Port

Destination IP address and port for the event

 

 

Message

Free-form text with error messages or notification about a VPN tunnel

 

 

Configuration

The logging level for the VPN log can be configured to provide more/less detailed information by configuring the Enable Verbose messages in the VPN Log option available on the IPSec Configuration page in the LSM application.

104X Family LSM User’s Guide V 2.5.1