WSM Reference Guide - WatchGuard Technologies

More documents

Recommendations

Info

Event LogsDescription of Log ModulesProduct Component Log Module FunctionVPN IKE Internet Key Exchange daemon. Diagnose theconfiguration and operation of VPN tunnels.PPTPPoint to Point Tunneling Protocol daemon. Diagnosethe daemon that manages PPTP for VPN tunnels.High Availability VRRP Virtual Router Redundency Protocol daemon.Diagnose the module that manages the virtual routerfor High Availability.HAMHigh Availablity Manager. Diagnose the module thatmanages High Availability operations.TPDAEMONTransport (HA) Protocol. Diagnose the module thatmanages the High Availability transport protocol.Dynamic IP DHCLIENT DHCP client. Diagnose the module that gets IPaddresses for DHCP clients.DHCPDDHCP server. Diagnose the module that DHCP serversuse to give IP addresses to clients.DHCRELAYDHCP relay. Diagnose the module that relays DHCPrequests to another server.PPPPoint to Point protocol daemon. Diagnose the daemonthat gives you PPP protocol support for PPPoE andPPTP.PPPoE (shows in the logfile as ADSL)Point to Point Protocol over Ethernet daemon.Diagnose the daemon that manages PPPoE.Proxy CFM Connection Framework Manager. Diagnose the servicethat manages proxy protected connections.SMSession Manager. Diagnose the module that convertsnetwork packet streams into TCP connections and UDPconnections.HTTPHypertext Transfer Protocol proxy. Diagnose theprocess that analyzes HTTP connections.SMTPSimple Mail Transfer Protocol proxy. Diagnose theprocess that analyzes SMTP connections.FTPFile Transfer Protocol proxy. Diagnose the process thatanalyzes FTP connections.DNSDomain Name Service proxy. Diagnose the analysisservice for DNS connections.WEBBLOCKERWebBlocker Server daemon. Diagnose the module thatgives you the list of Web sites to block.AVAntiVirus Server. Diagnose the server that supports AVdetection.Management CMM Configuration Maintenance Manager. Diagnose themodule that manages device configuration.SNMPSimple Network Management Protocol daemon.Diagnose the module that can query for SNMP MIBand can send SNMP traps to the user.MAMonitoring Agent. Diagnose Alarm Manager, themodule that collects alarms and determines the alarmresponse.MIAManagement Information Agent. Diagnose themodule that captures appliance statistics.42 WatchGuard System Manager
Event LogsDescription of Log ModulesProduct Component Log Module FunctionMONITORDMonitor daemon. Diagnose the daemon that monitorsthe network link.Webs(GOAHEAD)DVCPCDWeb server. Diagnose the device Web server thatsupports Web authentication and WSM.Dynamic VPN Control Protocol Client daemon.Diagnose the daemon that manages devices underDVCP control.Packet Filter PMM Policy Management Module. Diagnose the modulethat manages and controls packet filter policies.Authentication ADM Authentication Domain Manager. Diagnose themodule that authenticates packet filters and VPNtunnels.Event Log MessagesThis table includes the messages for most event logs generated by a Firebox using Fireware appliancesoftware, divided by log module.Event Log Message CatalogLog Module Log Message ID MessageADM 1000 The ADM daemon startedADM 1001 The ADM daemon stoppedADM 1002 The ADM set the event/trace level to %d/%dADM 1003 Is this message necessary?ADM 1004 ADM cannot allocate memoryADM 1005 ADM authentication server %s:%d did not respondADM 1006 ADM authentication is using this server %s:%dADM 1007 This ADM authentication server %s:%d is not availableADM 1008 This ADM authentication server %s:%d is availableADM 1009 Need more information about the ADM auth user [%s@%s]ADM 1010 ADM authentication switched to this secondary server %s:%dADM 1011 ADM domain configuration contains an incorrect entry ADM 1012 ADM auth %s user [%s@%s] acceptedADM 1013 ADM auth %s user [%s@%s] from %s rejectedADM 1014 ADM auth %s user [%s@%s] Server ChallengeADM 1015 ADM auth %s user [%s@%s] rejected, exceeded login limitADM 1016 ADM auth %s user [%s@%s] error, reason - %sADM 1017 ADM auth %s user [%s@%s] error, RADIUS auth method %s not supportedADSL 100 Your IP addresses are mismatched. Do a check to make certain that the IPaddresses are correct.ADSL 101 The ADSL connection on %s is onADSL 102 The ADSL link on %s endedADSL 201 A signal stopped the ADSL daemonReference Guide 43
Page 1 and 2: WatchGuard ® System ManagerReferen
Page 3 and 4: ContentsCHAPTER 1 Internet Protocol
Page 5 and 6: CHAPTER 1Internet Protocol Referenc
Page 7 and 8: Internet Protocol HeaderKeyword Num
Page 9 and 10: Transfer ProtocolsSource RoutingThe
Page 11 and 12: CHAPTER 2MIME Content TypesSoftware
Page 13 and 14: Type Subtype Reference (where avail
Page 23 and 24: CHAPTER 3Services and PortsWell-kno
Page 25 and 26: Well-Known Services ListPort(s) Pro
Page 27 and 28: Well-Known Services ListService Nam
Page 29 and 30: Well-Known Services ListService Nam
Page 31 and 32: CHAPTER 4Log MessagesUnderstanding
Page 33 and 34: Traffic LogsFWAllowEach packet filt
Page 35 and 36: Traffic Logsdst_ip="66.35.250.151"
Page 37 and 38: Traffic LogsDNS Proxy Traffic Log M
Page 39 and 40: Traffic LogsHTTP Proxy Traffic Log
Page 41 and 42: Alarm LogsPolicy AlarmsDefaultNameP
Page 43 and 44: Alarm LogsDenial of Servce (DoS) Al
Page 45: Event LogsGateway AntiVirus Service
Page 49 and 50: Event LogsEvent Log Message Catalog
Page 59 and 60: Firebox Log File XML DTD and Schema
Page 61 and 62: Firebox® X Edge Log MessagesModule
Page 73 and 74: CHAPTER 5WebBlocker ContentWatchGua
Page 75 and 76: WebBlocker CategoriesCategoryDrugs,
Page 77 and 78: WebBlocker CategoriesCategoryJob Se
Page 79 and 80: CHAPTER 6ResourcesThere are many re
Page 81 and 82: Mailing ListsMailing Listswg-users@
Page 83 and 84: White Hat Web Sitesbeginners. Cons:
Page 85 and 86: Other Web Sitesmaintains a list of
Page 87 and 88: RSS Feedswww.sophos.com/virusinfo/i
Page 89 and 90: IndexBblocked sites, searching for

WSM Reference Guide - WatchGuard Technologies

Create successful ePaper yourself

Delete template?

Save as template?