Administrator's Guide - Kerio Software Archive

Logs
4. Failed user authentication log records
Message format:
Authentication: : Client: :
• — The Kerio Control service to which the user attempted to
authenticate (Admin = administration using Administration Console, WebAdmin
= web administration interface, WebAdmin SSL = secure web administration
interface, Proxy = proxy server user authentication)
• — IP address of the computer from which the user attempted to
authenticate
• — reason of the authentication failure (nonexistent user / wrong
password)
Note: For detailed information on user quotas, refer to chapters 16.1 and 11.1.
5. Information about the start and shutdown of the Kerio Control Engine
a) Engine Startup:
[17/Dec/2008 12:11:33] Engine:
Startup.
b) Engine Shutdown:
[17/Dec/2008 12:22:43] Engine:
Shutdown.
22.12 Sslvpn Log
In this log, operations performed in the Clientless SSL-VPN interface are recorded. Each log
line provides information about an operation type, name of the user who performed it and file
associated with the operation.
Example:
[17/Mar/2008 08:01:51] Copy File: User: jsmith@company.com
File:
’\\server\data\www\index.html’
The Clientless SSL-VPN interface and the corresponding log is available in Kerio Control for
Windows only.
22.13 Warning Log
The Warning log displays warning messages about errors of little significance. Warnings can
display for example reports about invalid user login (invalid username or password), error in
communication of the server and Web administration interface, etc.
304