Appendix B Log Descriptions

Table 238 User Logs

LOG MESSAGE

DESCRIPTION

%s %s has logged in

The specified user signed in.

from %s

1st %s: AdministratorLimited-AdminUserExt-UserGuest

 

2nd %s: username

 

3rd %s: service name (HTTP/HTTPS, FTP, telnet, SSH, console)

 

NOTE field: %s means username.

 

 

%s %s has logged out

The specified user signed out.

from %s

1st %s: AdministratorLimited-AdminUserExt-UserGuest

 

2nd %s: username

 

3rd %s: service name (HTTP/HTTPS, FTP, telnet, SSH, console)

 

NOTE field: %s means username.

 

 

%s %s from %s has been

The specified user was signed out by the device due to a re-

logged out (re-auth

authentication timeout.

timeout)

1st %s: AdministratorLimited-AdminUserExt-UserGuest

 

2nd %s: username

 

3rd %s: service name (HTTP/HTTPS, FTP, telnet, SSH, console)

 

NOTE field: %s means username.

 

 

%s %s from %s has been

The specified user was signed out by the device due to a lease

logged out (lease

timeout.

timeout)

1st %s: AdministratorLimited-AdminUserExt-UserGuest

 

2nd %s: username

 

3rd %s: service name (HTTP/HTTPS, FTP, telnet, SSH, console)

 

NOTE field: %s means username.

 

 

%s %s from %s has been

The specified user was signed out by the device due to an idle timeout.

logged out (idle

1st %s: AdministratorLimited-AdminUserExt-UserGuest

timeout)

2nd %s: username

 

3rd %s: service name (HTTP/HTTPS, FTP, telnet, SSH, console)

 

NOTE field: %s means username.

 

 

Console is put into

Too many failed login attempts were made on the console port so the

lockout

device is blocking login attempts on the console port.

Address %u.%u.%u.%u is

Too many failed login attempts were made from an IP address so the

put into lockout

device is blocking login attempts from that IP address.

 

%u.%u.%u.%u: the source address of the user’s login attempt

Login attempt is made

A login attempt came from an IP address that the device has locked

on a lockout address

out.

from %s

%u.%u.%u.%u: the source address of the user’s login attempt

Failed %s login

The device blocked a login because the maximum login capacity has

attempt (reach the

already been reached.

maximum number of

%s: service name

user)

 

Failed %s login

The device blocked a login because the maximum simultaneous login

attempt (reach the

capacity for the administrator or access account has already been

maximum number of

reached.

simultaneous logon)

%s: service name

 

665

ZyWALL USG 1000 User’s Guide