Chapter 25 Logs Screens

 

Table 151 Remote Management Logs

 

 

LOG MESSAGE

DESCRIPTION

 

Remote Management: FTP denied

Attempted use of FTP service was blocked according to

 

 

remote management settings.

 

Remote Management: TELNET denied

Attempted use of TELNET service was blocked

 

 

according to remote management settings.

 

Remote Management: HTTP or UPnP

Attempted use of HTTP or UPnP service was blocked

 

denied

according to remote management settings.

 

Remote Management: WWW denied

Attempted use of WWW service was blocked according

 

 

to remote management settings.

 

Remote Management: HTTPS denied

Attempted use of HTTPS service was blocked

 

 

according to remote management settings.

 

Remote Management: SSH denied

Attempted use of SSH service was blocked according to

 

 

remote management settings.

 

Remote Management: ICMP Ping

Attempted use of ICMP service was blocked according

 

response denied

to remote management settings.

 

Remote Management: SNMP denied

Attempted use of SNMP service was blocked according

 

 

to remote management settings.

 

Remote Management: DNS denied

Attempted use of DNS service was blocked according

 

 

to remote management settings.

Table 152 IPSec Logs

LOG MESSAGE

DESCRIPTION

Discard REPLAY packet

The router received and discarded a packet with an incorrect

 

sequence number.

Inbound packet

The router received a packet that has been altered. A third party

authentication failed

may have altered or tampered with the packet.

Receive IPSec packet,

The router dropped an inbound packet for which SPI could not find a

but no corresponding

corresponding phase 2 SA.

tunnel exists

 

Rule <%d> idle time

The router dropped a connection that had outbound traffic and no

out, disconnect

inbound traffic for a certain time period. You can use the "ipsec timer

 

chk_conn" CI command to set the time period. The default value is 2

 

minutes.

 

 

WAN IP changed to <IP>

The router dropped all connections with the “MyIP” configured as

 

“0.0.0.0” when the WAN IP address changed.

Inbound packet

Please check the algorithm configuration.

decryption failed

 

Cannot find outbound SA

A packet matches a rule, but there is no phase 2 SA for outbound

for rule <%d>

traffic.

Rule [%s] sends an echo

The device sent a ping packet to check the specified VPN tunnel's

request to peer

connectivity.

Rule [%s] receives an

The device received a ping response when checking the specified

echo reply from peer

VPN tunnel's connectivity.

 

437

ZyWALL 2 Plus User’s Guide