ScreenOS Message Log Reference Guide Release 6.0.0, Rev. 1 Messages -- Text Only
P/N 530-017766-01, Revision  1




Addresses
----------------------------------------


Notification (00001)

Address group <address_group_name> <config_action_add_delete_modify> <config_changer> session.

Address group <address_group_name> <config_action_add_delete_member> <member_name> <config_changer> session.

Address <address_name> for domain address <domain_name> in zone <zone_name> <config_action_add_delete_modify> <config_changer> session.

Address <address_name> for IP address <ip_address> in zone <zone_name> <config_action_add_delete_modify> <config_changer> session.

Address <address_name> for ip address <ip_address> in zone <zone_name> <config_action_add_delete_modify> <config_changer> session.


Admin
----------------------------------------


Alert (00027)

ScreenOS <major_version>.<minor_version>.<rev_version> Serial# <serial_number>: <ar_log_initiated_string>

ScreenOS <major_version>.<minor_version>.<rev_version> Serial# <serial_number>: <ar_log_aborted_string>

System configuration has been erased


Critical (00027)

Multiple login failures occurred for user <admin_name>

Multiple login failures occurred for user <admin_name> from IP address <ip_addr>:<port>


Warning (00002)

ADMIN AUTH: Local instance of an external admin user privilege has been changed from <string> to <string>.


Warning (00515)

Admin user <admin_name> has been forced to log out of the serial console session.

Admin user <admin_name> has been forced to log out of the SSH session on host <ip_addr>:<port>

Admin user <admin_name> has been forced to log out of the Telnet session on host <ip_addr>:<port>

Admin user <admin_name> has been forced to log out of the Web session on host <ip_addr>:<port>

Admin user <admin_name> has logged on via SSH from <ip_addr>:<port>

Admin user <admin_name> has logged on via Telnet from <ip_addr>:<port>

Admin user <admin_name> has logged on via the console

Admin user <admin_name> has logged out via SSH from <ip_addr>:<port>

Admin user <admin_name> has logged out via Telnet from <ip_addr>:<port>

Admin user <admin_name> has logged out via the console

Login attempt to system by admin <admin_name> via SSH from <ip_addr>:<port> has failed<reason>

Login attempt to system by admin <admin_name> via Telnet from <ip_addr>:<port> has failed<reason>

Login attempt to system by admin <admin_name> via the console has failed<reason>

Management session via serial console for <vsys>admin <admin_name> has timed out

Management session via SSH from <ip_addr>:<port> for <vsys>admin <admin_name> has timed out

Management session via Telnet from <ip_addr>:<port> for <vsys>admin <admin_name> has timed out

Remotely authenticated Admin <admin_name> demoted from ROOT privilege to RW privilege.

Remotely authenticated Admin <admin_name> demoted from <old_priv> privilege to <new_priv> privilege.

Vsys admin user <admin_name> has logged on via SSH from <ip_addr>:<port>

Vsys admin user <admin_name> has logged on via Telnet from <ip_addr>:<port>

Vsys admin user <admin_name> has logged on via the console

Vsys admin user <admin_name> has logged out via SSH from <ip_addr>:<port>

Vsys admin user <admin_name> has logged out via Telnet from <ip_addr>:<port>

Vsys admin user <admin_name> has logged out via the console


Warning (00518)

ADM: Local admin authentication failed for login name <admin_name>: invalid login name

ADM: Local admin authentication failed for login name <admin_name>: invalid password

Admin user <admin_name> has been rejected via the <server_name> server at <ip_addr>.


Warning (00519)

Admin user <admin_name> has been accepted via the <server_name> server at <ip_addr>.


Notification (00002)

ADM: Non-primary authentication server <status> to authenticate non-ROOT privileged admins. Modifier: <admin_name>

ADM: Non-primary authentication server <status> to authenticate ROOT privileged admins. Modifier: <admin_name>

ADM: Remote authentication server set to <status>. Modifier: <admin_name>

ADM: Remotely authenticated admins <status> READ-ONLY privilege. Modifer: <admin_name>

ADM: Remotely authenticated ROOT privileged admins <status>. Modifer: <admin_name>

Maximum failed login attempts before administrative session disconnects has been modified from <orig_value> to <new_value> by admin <username> <changed_via>

Root admin access restriction through console only has been disabled by admin <username> <changed_via>

Root admin access restriction through console only has been enabled by admin <username> <changed_via>

Root admin password restriction of minimum <passwd_len> characters has been disabled by admin <username> <changed_via>

Root admin password restriction of minimum <passwd_len> characters has been enabled by admin <username> <changed_via>

Single use password restriction for read-write administrators has been disabled by admin <username> <changed_via>

Single use password restriction for read-write administrators has been enabled by admin <username> <changed_via>


Notification (00003)

The console debug buffer has been <status>

The console page size changed from <old_page_size> to <new_page_size>

The console timeout value changed from <old_timeout_value> to <new_timeout_value> minutes

The serial console has been <status> by admin <string>


Information (00002)

Admin account created for <admin_name_1> <changer>

Admin account deleted for <admin_name_1> <changer>

Admin account modified for <admin_name_1> <changer>

Admin name for account <old_admin_name> has been modified to <new_admin_name> <changer>

Admin password for account <admin_name> has been modified <changer>

Extraneous exit is issued <changer>

HTTP port has been changed from <old_port> to <new_port> <admin_name>

Management restriction for IP <ip_addr> has been removed in vsys <admin_name>. (by admin <vsys_name>)

Management restriction for IP <ip_addr> subnet <ip_mask> has been added in vsys '<admin_name>'. (by admin <vsys_name>)

Management restriction removed for all IPs in vsys <vsys_name>. (by admin <admin_name>)

Management restriction removed for all IPs on device. (by admin <admin_name>)

SSH port has been changed from <old_port> to <new_port> <admin_name>

System IP has been changed from <old_ip_addr> to <new_ip_addr> <admin_name>

Telnet port has been changed from <old_port> to <new_port> <admin_name>

Web admin authentication idle timeout value has been changed from <old_timeout> to <new_timeout> minutes


ADSL
----------------------------------------


Notification (00557)

ADSL Line Activating.

ADSL Line Closed.

ADSL Line Close Rejected.

ADSL Line Down.

ADSL Line in an unknown state.

ADSL Line Opened (=>Showtime).

ADSL Line Open Failed (Errored Message Received from ATU-C).

ADSL Line Open Failed (Forced Silence).

ADSL Line Open Failed (Incompatible Line Conditions).

ADSL Line Open Failed (Protocol Error).

ADSL Line Open Failed (Spurious ATU Detected).

ADSL Line Open Failed (Unable to Lock with ATU-C).

ADSL Line Open Failed (Unknown Error Code).

ADSL Line Open Failed (Unselectable Operation Mode).

ADSL Line Open Rejected.

ADSL Line Signal Lost detected.

ADSL Line Suicide Request Received.

ADSL Line UP Fast and Interleave Channels.

ADSL Line UP Fast Channel, change Utopia address to match it.

ADSL Line UP Fast Channel.

ADSL Line UP Interleaved Channel, change Utopia address to match it.

ADSL Line UP Interleaved Channel.

ADSL Line Waiting for Activating.


Notification (00616)

ADSL<card number>/0 Line Down.

ADSL<card number>/0 Line Training.

ADSL<card number>/0 Line Up.

ADSL<card number>/0 SOC Firmware Failed (Load Bootrom Failure).

ADSL<card number>/0 SOC Firmware Failed (Load image Failure).

ADSL<card number>/0 SOC Firmware Failed (push configuration failure).

ADSL<card number>/0 SOC Firmware Reboot(Keepalive timeout).

ADSL<card number>/0 SOC Firmware Reset.

ADSL<card number>/0 SOC Firmware Startup Failed (Wait Startup timeout).

ADSL<card number>/0 SOC Firmware Startup Successful.


Anti-spam
----------------------------------------


Warning (00064)

Anti-Spam is attached to policy ID <integer>.

Anti-Spam is detached from policy ID <integer>.


Warning (00563)

Anti-Spam: SPAM FOUND ! <as_sender_info>.


Notification (00064)

Anti-Spam action changed.

Anti-Spam blacklist is changed.

Anti-Spam SBL server configured: <sbl_server_name >.

Anti-Spam whitelist is changed.


Notification (00563)

Anti-Spam: Exceeded maximum concurrent connections (<url_server_vendor_name>).

Anti-Spam key is expired (expiration date: %t2; current date: %t2).


Antivirus
----------------------------------------


Critical (00554)

SCAN-MGR: AV pattern file size is too large (<integer> bytes).

SCAN-MGR: Cannot write AV pattern file to flash.

SCAN-MGR: Check AV pattern file failed with error code: <integer>.

SCAN-MGR: Check AV pattern file failed with error code: <string>.

WARNING: Current hardware configuration does not support embedded AV scanning. Please upgrade system memory.


Critical (00574)

ICAP: Input file size is too large (<integer> bytes).


Warning (00066)

AV configures an Extension list <string> with extension <string>.

AV configures MIME list <string> with MIME <string>.

AV creates profile <string>.

AV object <string> <string> timeout is reset to default value.

AV object <string> <string> timeout is reset to its default value.

AV pattern type is changed from <string> to <string> due to increasing pattern file size and limited flash space.

AV profile <string> sets ICAP <string><string> to <string>.

AV profile <string> <string>s protocol <string> <string> <string> <string> <string> <string>.

AV profile <string> <string>s protocol <string> <string> <string> <string> <string> <string>.

AV profile <string> unsets ICAP <string><string>.

AV removes extension list <string>.

AV removes MIME list <string>.

AV removes profile <string>.

AV <string> is attached to policy ID <integer>.

AV <string> is detached from policy ID <integer>


Warning (00547)

AV: Content from <IP address>:<integer>-><IP address>:<integer><string><string>%.64s<string> is dropped because maximum concurrent messages are exceeded.

AV: Content from <IP address>:<integer>-><IP address>:<integer><string><string>%.64s<string> is dropped because maximum content size is exceeded.

AV: Content from <IP address>:<integer>-><IP address>:<integer><string><string>%.64s<string> is dropped due to scan-engine error or constraint with code <integer> for <string>.

AV: Content from <IP address>:<integer>-><IP address>:<integer><string><string>%.64s<string> is dropped due to scan-engine error or constraint with code <integer> for <string>.

AV: Content from <IP address>:<integer>-><IP address>:<integer><string><string>%.64s<string> is passed because maximum concurrent messages are exceeded.

AV: Content from <IP address>:<integer>-><IP address>:<integer><string><string>%.64s<string> is passed because maximum content size is exceeded.

AV: Content from <IP address>:<integer>-><IP address>:<integer><string><string>%.64s<string> is passed due to scan-engine error or constraint with code <integer> for <string>.

AV: Content from <IP address>:<integer>-><IP address>:<integer><string><string>%.64s<string> is passed due to scan-engine error or constraint with code <integer> for <string>.

AV: VIOLATION FOUND: <IP address>:<integer>-><IP address>:<integer><string><string>%.64s<string> total <integer>, id <integer>: violation <string> action <string>.(file <string>)

AV: VIRUS FOUND: <IP address>:<integer>-><IP address>:<integer><string><string>%.64s<string> file %.64s virus <string>


Notification (00066)

AV fail mode is set to <string> unexamined traffic if a corrupt file is detected.

AV fail mode is set to <string> unexamined traffic if any error occurs.

AV fail mode is set to <string> unexamined traffic if a password protected file is detected.

AV fail mode is set to <string> unexamined traffic if content size exceeds maximum.

AV fail mode is set to <string> unexamined traffic if number of decompress layers exceeds maximum.

AV fail mode is set to <string> unexamined traffic if the firewall runs out of resources.

AV fail mode is set to <string> unexamined traffic if the operation times out.

AV fail mode is set to <string> unexamined traffic if the scan engine is not ready.

AV HTTP sets webmail pattern <string> <string> <string><string>.

AV HTTP trickling setting to be trickling <integer> byte for every <integer> KB if content length is larger than <integer> KB, timeout interval is <integer> seconds.

AV HTTP trickling setting to be trickling <integer> byte for every <integer> Mb, if content length is larger than <integer> MB.

AV HTTP turns off HTTP trickling.

AV HTTP turns <string> HTTP connection header close modification.

AV HTTP turns <string> HTTP webmail scanning.

AV HTTP unsets webmail pattern <string><string>.

AV maximum content size is set to <integer> KB.

AV maximum number of concurrent messages is set to <integer>.

AV object <string> <string> is enabled with timeout <integer>.

AV object <string> <string> is enabled with timeout <integer>.

AV per client allowed resource is set to <integer> percent.

AV queue size is set to <integer>.


Notification (00081)

ICAP server-group <string> is added.

ICAP server-group <string> is removed.

ICAP server <string> has maximum connections set to <integer>.

ICAP server <string> is added to server-group <string>.

ICAP server <string> is disabled.

ICAP server <string> is enabled.

ICAP server <string> is removed.

ICAP server <string> is removed from server-group <string>.

ICAP server <string> is set with host address <string> and port <integer>.

ICAP server <string> probe interval is set to <integer>.

ICAP server <string> probe URL is set to <string>.


Notification (00547)

ICAP: Server <string> status changed from <string> to <string>.


Notification (00554)

SCAN-MGR: Attempted to load AV pattern file created on %t2 after the AV license expired on %t2.

SCAN-MGR: AV scan engine is ready.

SCAN-MGR: Cannot retrieve AV pattern file due to <string> (<integer>). HTTP status code: <integer>.

SCAN-MGR: New AV pattern file has been updated. Version: <string>; size: <integer> bytes.

SCAN-MGR: <string>

SCAN-MGR: The URL for AV pattern update server is set to <string> and the update interval is set to <integer> minutes.

SCAN-MGR: The URL for AV pattern update server is unset and the update interval returned to its default.


ARP
----------------------------------------


Critical (00031)

<string> detected an IP conflict (IP <IP address>, MAC %m) on interface <string>


Critical (00079)

<string> detected a duplicate VSD group master (IP <IP address>, MAC %m) on interface <string>


Notification (00031)

ARP detected IP conflict: IP address <ip> changed from interface <if_old> to interface <if_new>


Notification (00051)

Static ARP entry added to interface <string> with IP <IP address> and MAC %m


Notification (00052)

Static ARP entry deleted from interface <string> with IP address <IP address> and MAC address %m


Notification (00053)

ARP always on destination enabled


Notification (00054)

ARP always on destination disabled


Notification (00082)

IRDP cli: <string> <string>


Attack Database
----------------------------------------


Critical (00767)

WARNING: Current hardware configuration cannot support Deep Inspection. Please upgrade system memory.


Notification (00767)

Attack database version <version> is rejected because the authentication check failed.

Attack database version <version> is <authenticated>saved to flash.

Attack group <member attack group's name> is added to <attack group's name> <config_changer> <admin_name>.

Attack group <attack group's old name> is changed to <attack group's new name> <config_changer> <admin_name>.

Attack group <attack group name> is created <config_changer> <admin_name>.

Attack group <attack group name> is deleted <config_changer> <admin_name>.

Attack group <member attack group's name> is removed from <attack group's name> <config_changer> <admin_name>.

Attack <attack's name> is added to attack group <attack group's name> <config_changer> <admin_name>.

Attack <attack's old name> is changed to <attack's new name> <config_changer> <admin_name>.

Attack <attack name> is created <config_changer> <admin_name>.

Attack <attack name> is deleted <config_changer> <admin_name>.

Attack <attack's name> is removed from <attack group's name> <config_changer> <admin_name>.

Cannot download attack database from <server> (error <error message>).

Cannot parse attack database.

Cannot parse attack database header info.

Cannot save attack database version <version>.

Cannot switch to attack database version <version>.

Deep Inspection update key is expired.


Attacks
----------------------------------------


Critical (00024)

<string> has overflowed.


Notification (00002)

Bypass non-IP traffic option is <action>.

Bypass-others-IPSec option is <action>.

Logging of dropped traffic to self (excluding multicast) has been <action>.

Logging of dropped traffic to self has been <action>.

Logging of ICMP traffic to self has been <action>.

Logging of IKE traffic to self has been <action>.

Logging of SNMP traffic to self has been <action>.

Malicious URL <service_name> is <service_action> for <service_dest_type> <service_dest_name>.

Screening of all attacks is <action> on <service_dest_type> <service_dest_name> <admin>.

<service_name> is set to <service_threshold> for <service_dest_type> <service_dest_name>.

<service_name> is <service_status> on <service_dest_type> <service_dest_name> <admin>.


Information (00534)

<string> is cleared.


Auth
----------------------------------------


Critical (00015)

Administrator's password complexity is set to scheme '<length>' by admin '<admin_name>'.

Administrator's password minimum length is set to '<length>' by admin '<admin_name>'.

Auth user's password complexity is set to scheme '<length>' by admin '<admin_name>'.

Minimum length of Auth user's password is set to '<length>' by admin '<admin_name>'.


Critical (00518)

Admin user '<user_name>' authorization failure: Password does not comply with password policy.

Auth user <user_name> authorization failure: Password does not comply with password policy.


Warning (00518)

Authentication for user <user_name> at <client_ip> was denied (long password).

Authentication for user <user_name> at <client_ip> was denied (long password).

Authentication for user <user_name> at <client_ip> was denied (long username).

Authentication for user <user_name> at <client_ip> was denied (long username).

Error in authentication for WebAuth user <user_name> at <client_ip>

Local authentication for user <user_name> at <client_ip> was denied<reason>.

Local authentication for WebAuth user <user_name> at <client_ip> was denied<reason>

User <user_name> at <client_ip> is challenged by the <auth_server_type> server at <auth_server_ip>. (Rejected because challenge is not supported for FTP).

User <user_name> at <client_ip> is challenged by the <auth_server_type> server at <auth_server_ip>. (Rejected because challenge is not supported for Web).

User <user_name> at <client_ip> is rejected by the <auth_server_type> server at <auth_server_ip>.

User <user_name> at <client_ip> is rejected by the <auth_server_type> server at <auth_server_ip>.

User <user_name> at <client_ip> is rejected through the <auth_server_type> server at <auth_server_ip>.

User <user_name> at <client_ip> <auth_server_type> authentication attempt has timed out.

User <user_name> at <client_ip> <auth_server_type> authentication attempt has timed out.

User <user_name> at <client_ip> <auth_server_type> authentication attempt has timed out.

WebAuth user <user_name> at <client_ip> is rejected/timed out by the <auth_server_type> server at <auth_server_ip>.


Warning (00519)

Local authentication for user <user_name> at <client_ip> was successful.

Local authentication for WebAuth user <user_name> at <client_ip> was successful

User <user_name><of_group> at <client_ip> is accepted by the <auth_server_type> server at <auth_server_ip>.

User <user_name><of_group> at <client_ip> is accepted by the <auth_server_type> server at <auth_server_ip>.

User <user_name><of_group> at <client_ip> is accepted via the <auth_server_type> server at <auth_server_ip>.

WebAuth user <user_name> at <client_ip> is accepted by the <auth_server_type> server at <auth_server_ip>.


Warning (00520)

Backup1 <primary_server_name>, backup2 <backup1_server_name>, and primary <backup2_server_name> servers failed.

Backup2 <backup2_server_name>, primary <primary_server_name>, and backup1 <backup1_server_name> servers failed.

Primary <primary_server_name>, backup1 <backup1_server_name>, and backup2 <backup2_server_name> servers failed.

Trying backup1 server <backup1_server_name>.

Trying backup2 server <backup2_server_name>.

Trying primary server <primary_server_name>.


Notification (00015)

Admin user <admin_user> attempted to verify the encrypted password <encr_pass>. Verification failed.

Admin user <admin_user> attempted to verify the encrypted password <encr_pass>. Verification was successful.

Auth server <auth_server_obj_name> account type is set to <acct_types>.

Auth server <auth_server_obj_name> authentication timeout is set to <auth_timeout>.

Auth server <auth_server_obj_name> backup1 name is unset.

Auth server <auth_server_obj_name> backup1 server name is set to <backup1_name>.

Auth server <auth_server_obj_name> backup2 name is unset.

Auth server <auth_server_obj_name> backup2 server name is set to <backup2_name>.

Auth server <auth_server_obj_name> fail-over revert interval is set to <revert_interval> seconds.

Auth server <auth_server_obj_name> id is set to <new_as_id>.

Auth server <auth_server_obj_name> is created.

Auth server <auth_server_obj_name> is deleted.

Auth server <auth_server_obj_name> is modified.

Auth server <auth_server_obj_name> LDAP cn is set to <ldap_cn>.

Auth server <auth_server_obj_name> LDAP dn is set to <ldap_dn>.

Auth server <auth_server_obj_name> LDAP parameters are set to server name: <auth_server_name_ip>, port: <ldap_port>, dn: <ldap_dn>, cn: <ldap_cn>.

Auth server <auth_server_obj_name> LDAP port number is set to <ldap_port>.

Auth server <auth_server_obj_name> RADIUS port is set to <radius_port>.

Auth server <auth_server_obj_name> RADIUS port is unset to default <default_radius_port>.

Auth server <auth_server_obj_name> RADIUS retry timeout is set to default of <default_radius_retry_timeout>.

Auth server <auth_server_obj_name> RADIUS secret is changed.

Auth server <auth_server_obj_name> RADIUS secret is disabled.

Auth server <auth_server_obj_name> SecurID auth port is set to <auth_port>.

Auth server <auth_server_obj_name> SecurID backup1 server name is set to <backup1_auth_server_name_ip>.

Auth server <auth_server_obj_name> SecurID client retries is set to <securid_client_retries>.

Auth server <auth_server_obj_name> SecurID server name is set to <auth_server_name_ip>.

Auth server <auth_server_obj_name> SecurID timeout is set to <securid_client_timeout>.

Auth server <auth_server_obj_name> SecurID use duress is disabled.

Auth server <auth_server_obj_name> SecurID use duress is enabled.

Auth server <auth_server_obj_name> SecurID uses DES encryption.

Auth server <auth_server_obj_name> SecurID uses SDI encryption.

Auth server <auth_server_obj_name> server name is disabled.

Auth server <auth_server_obj_name> server name is set to <auth_server_name_ip>.

Auth server <auth_server_obj_name> timeout is unset to default <default_auth_timeout>.

Auth server <auth_server_obj_name> type is set to LDAP.

Auth server <auth_server_obj_name> type is set to RADIUS.

Auth server <auth_server_obj_name> type is set to SecurID.

Auth server <auth_server_obj_name> type is unset to default RADIUS.

Auth server <auth_server_obj_name> username character separator is set to <>separator_char>; number of occurrences of character separator is <num_occurrence>.

Certificate Authority index for Infranet Controller <infranet_controller_obj_name> changed.

Certificate subject for Infranet Controller <infranet_controller_obj_name> changed from <old_cert_name> to <new_cert_name>.

Contact interval for Infranet settings changed from <old_contact_interval> to <new_contact_interval> seconds.

Default firewall authentication server is changed to <auth_server_obj_name>.

Forced timeout for Auth server <auth_server_obj_name> authentication is set to <auth_forced_timeout> minutes.

Forced timeout for Auth server <auth_server_obj_name> is unset to its default value, <default_auth_timeout> minutes.

Host name for Infranet Controller <infranet_controller_obj_name> changed from <old_host_name> to <new_host_name>.

Infranet Controller <infranet_controller_obj_name> is created.

Infranet Controller <infranet_controller_obj_name> is deleted.

Infranet Enforcer could not connect to Infranet Controller <infranet_controller_obj_name> (ip <infranet_controller_ip>).

Infranet Enforcer could not connect to the Infranet Controller because a socket could not be created.

Infranet Enforcer could not connect to the Infranet Controller because a socket is already connected.

Infranet Enforcer could not connect to the Infranet Controller because no certificate is set for the Controller.

Infranet Enforcer could not connect to the Infranet Controller because no IP address is set for the Controller.

Infranet Enforcer could not connect to the Infranet Controller because no password is set for the Controller.

Infranet Enforcer could not connect to the Infranet Controller because the Controller could not be reached on the network.

Infranet Enforcer could not connect to the Infranet Controller because the <outgoing_interface> interface could not be bound to the socket.

Infranet Enforcer could not connect to the Infranet Controller because the socket could not be bound.

Infranet Enforcer could not connect to the Infranet Controller because the socket could not be bound to SSL protocol.

Infranet Enforcer did not receive a keepalive from the Infranet Controller(<infranet_controller_ip>) in the past <seconds_for_which_no_keepalive> seconds. Cleaning up internal state.

Infranet Enforcer is connected to Infranet Controller <infranet_controller_obj_name> (ip <infranet_controller_ip>).

IP address for Infranet Controller <infranet_controller_obj_name> changed from <old_ip> to <new_ip>.

Number of RADIUS retries for auth server <auth_server_obj_name> is set to <radius_retry_value>.

Password for Infranet Controller <infranet_controller_obj_name> changed.

Port number for Infranet Controller <infranet_controller_obj_name> changed from <old_port> to <new_port>.

Source interface for Infranet Controller <infranet_controller_obj_name> changed from <old_intf_name> to <new_intf_name>.

Timeout action for Infranet settings changed from <old_timeout_action> to <new_timeout_action>.

Timeout for Infranet Controller <infranet_controller_obj_name> changed from <old_timeout> to <new_timeout> seconds.

WebAuth is set to <auth_server_obj_name>.


Notification (00525)

The new PIN for user <user_name> at <client_ip> is <accept_or_reject> by SecurID <auth_server_ip>.

User <user_name> at <client_ip> has selected a system-generated PIN for authentication with SecurID <auth_server_ip>.

User <user_name> at <client_ip> must enter New PIN for SecurID <auth_server_ip>.

User <user_name> at <client_ip> must enter Next Code for SecurID <auth_server_ip>.

User <user_name> at <client_ip> must make a New PIN choice for SecurID <auth_server_ip>.


Notification (00543)

Access for firewall user <user_name> at <client_ip> (accepted at <time_connected_at>2 for duration <duration_connected_for>) by policy id <policy_id> is now over.

Access for firewall user <user_name> at <client_ip> (accepted at <time_connected_at>2 for duration <duration_connected_for>) by policy id <policy_id> is now over due to forced timeout.

Access for firewall user <user_name> at <client_ip> (accepted at <time_connected_at>2 for duration <duration_connected_for> through the <auth_server_obj_name> auth server) by policy id <policy_id> is now over.

Access for firewall user <user_name> at <client_ip> (accepted at <time_connected_at>2 for duration <duration_connected_for> via the <auth_server_obj_name> auth server) by policy id <policy_id> is now over due to forced timeout.

Access for WebAuth firewall user <user_name> at <client_ip> (accepted at <time_connected_at>2 for duration <duration_connected_for>) is now over.

Access for WebAuth firewall user <user_name> at <client_ip> (accepted at <time_connected_at>2 for duration <duration_connected_for>) is now over due to forced timeout.

Access for WebAuth firewall user <user_name> at <client_ip> (accepted at <time_connected_at>2 for duration <duration_connected_for> through the <auth_server_obj_name> auth server) is now over.

Access for WebAuth firewall user <user_name> at <client_ip> (accepted at <time_connected_at>2 for duration <duration_connected_for> through the <auth_server_obj_name> auth server) is now over due to forced timeout.


Notification (00546)

User <user_name><of_group> at <client_ip> is challenged by the <auth_server_type> server at <auth_server_ip>.


Notification (00767)

Cannot get route to SecurID server <server_ip>.

FIPS: Attempt to set RADIUS shared secret with invalid length <secret_len>.

The device cannot contact the SecurID server.

The device cannot send data to the SecurID server.

The dictionary file version on the RADIUS server <radius_server_dictionary_version> does not match the version <ns_device_dictionary_version> supported on the firewall.

User <user_name> belongs to a different group in the RADIUS server than that allowed in the device.


BGP
----------------------------------------


Critical (00206)

The total number of redistributed routes into BGP in vrouter (<vrouter-name>) exceeded system limit (<system-limit>)


Notification (00039)

<configuration_command>

<set_or_unset> virtual router <vrouter_name> with the BGP protocol <configuration_command>

<set_or_unset> virtual router <vrouter_name> with the configuration command <configuration_command>


Information (00542)

BGP instance created for virtual router <vrouter_name>

BGP instance deleted for virtual router <vrouter_name>

BGP of vr: <vr name>, closing the socket: exceeded maximum number of bgp peers allowed (<total_max_num_bgp_peers_cnt>)

BGP of vr: <vr name>, failed to add prefix <ip_address>/<ip_mask_len> to FDB

BGP of vr: <vr name>, prefix adding: <ip_address>/<ip_mask_len>, ribin overflow <overflow_count> times (max rib-in <ribin count>)

BGP of vr: <vr name>, Route <ip_address>/<ip_mask_len> ignored, Path Attr len: <path_attr_len> (greater than max. <max_path_attr_len>)

BGP peer <peer_ip_address> changed to Established state

BGP peer <peer_ip_address> changed to Idle state

BGP peer <peer_ip_address> created.

BGP peer <peer_ip_address> disabled.

BGP peer <peer_ip_address> enabled.

BGP peer <peer_ip_address> removed.

BGP received route-refresh request from peer <peer_ip_address> for afi/safi: <address-family>/<sub-address-family>

BGP sent route-refresh request to peer <peer_ip_address> for afi/safi: <address-family>/<sub-address-family>

<error_string> invalid error code from notification message

<notification_type> <error_string>


Cisco-HDLC
----------------------------------------


Alert (00087)

Cisco-HDLC detected loop <times> times on interface <interfacename>.


Notification (00076)

CISCO-HDLC keepalive down count value was changed from <old_val> to <new_val> on interface <interfacename>.

CISCO-HDLC keepalive interval was changed from <old_val> to <new_val> on interface <interfacename>.

CISCO-HDLC keepalive is <enable> on interface <interfacename>.

CISCO-HDLC keepalive up count value was changed from <old_val> to <new_val> on interface <interfacename>.

Set interface <interfacename> encap as cisco-hdlc.

Unset interface <interfacename> encap from cisco-hdlc.


Notification (00571)

CISCO-HDLC is <status> on interface <interfacename>.


Device
----------------------------------------


Alert (00767)

<upgrade_message>


Critical (00020)

The system memory is low (<alloc_mem> bytes allocated out of total <total_mem> bytes).


Critical (00022)

All fans are now functioning properly.

At least one fan is not functioning properly.

The battery is not functioning properly.

The battery is now functioning properly.

The power supply <power_id> is functioning properly.

The power supply <power_id> is not functioning properly.

The system temperature: (<sys_tempc> Centigrade, <sys_tempf> Fahrenheit) is severely high!

The system temperature (<sys_tempc> Centigrade, <sys_tempf> Fahrenheit) is OK now.

The system temperature (<sys_tempc> Centigrade, <sys_tempf> Fahrenheit) is too high!


Critical (00034)

Ethernet driver ran out of rx bd (port <port_id>).


Critical (00092)

WAN card <slot_num> is not functioning properly and will be restarted.


Critical (00612)

Switch error: get <register type> register (dev <device number>, reg <register number>) fail.

Switch error: set <register type> register (dev <device number>, reg <register number>, value 0x<register value>) fail.


Critical (00701)

Security Board <sm_board_id> System Hanged


Critical (00702)

Security Board <slot_num> CPU <cpu_num> Packet Drop Counter <fulldrp_cnt>


Critical (00751)

Switch error: <error information>.


Critical (00767)

<upgrade_message>


Error (00009)

<integer>/<integer> vid <integer> HW vtable leak, total <integer> entries.


Notification (00002)

LCD control keys have been locked.

LCD display has been turned off and the LCD control keys have been locked.

LCD display has been turned on.

LCD display has been turned on and the LCD control keys have been unlocked.


Notification (00023)

System configuration has been erased.


Notification (00545)

Failed to initialize modem <modem_name>, <modem_token_str>

Modem <modem_name> failed to dial <phone_number>, <modem_token_str>

Modem <modem_name> has been disconnected.

Modem <modem_name> is connected. Phone number: <phone_number>, Account name: <login_name>, Status <modem_connect_str>

<arg_string>


Notification (00612)

bgroup event: <event information>.

bgroup setting: bind port <port name> to interface <interface name>.

bgroup setting: unbind port <port name> from interface <interface name>.

Switch event: change interface <interface name> from mii <old mii num> to mii <new mii num>.

Switch event: the status of ethernet interface <interface name> change to link <current link status>, duplex <current duplex>, speed <current speed>.

Switch event: the status of ethernet port <port name> changed to link <current link status>, duplex <current duplex>, speed <current speed>.

Switch init: <init information>.

switch install: install port <port number> to interface <interface name>.

Switch setting: <switch cli>.

Switch setting: set interface <ethernet interface name> <etnernet interface setting>.

Switch setting: set interface <interface name> <interface setting>.


Notification (00767)

<upgrade_message>


DHCP
----------------------------------------


Alert (00029)

IP pool of DHCP server on interface <string> is full. Unable to <string> IP address to client at %m.


Critical (00029)

DHCP server set to OFF on <string> (another server found on <IP address>).


Warning (00527)

IP pool of DHCP server on interface <string> is more than 90%% allocated.


Notification (00009)

DHCP client is <string> on interface <string> <string>.


Notification (00024)

DHCP client admin preference is set on <string> as <integer>.

DHCP client admin preference is unset on <string> from <integer>.

DHCP relay agent settings on <string> are <string>.

DHCP server IP address pool is changed.

DHCP server is <string>.

DHCP server options are <string>.

DHCP server shared IP is <string>.


Notification (00027)

DHCP client auto-config is <string>.

DHCP client lease time is set to default value.

DHCP client lease time is set to <integer> minutes.

DHCP client server IP address is reset.

DHCP client server IP address is set to <IP address>.

DHCP client server-update is <string>.

DHCP client vendor identifier is reset.

DHCP client vendor identifier is set to <string>.


Information (00527)

DHCP server has assigned or released an IP address.

DHCP server on interface <string> received DHCPDISCOVER from %m requesting out-of-scope IP address <IP address>/<IP address>.

DHCP server released an IP address.

IP address <IP address> is assigned to %m.

IP address <IP address> is released from %m.

MAC address %m has declined address <IP address>.

One or more IP addresses are expired.


Information (00530)

An IP address conflict is detected and the DHCP client declined address <IP address>.

DHCP client IP address <IP address> for interface <string> has been manually released.

DHCP client is unable to get IP address for interface <string>.

DHCP client lease for <IP address> has expired.

DHCP client on interface <string> was offered IP <IP address>/<IP address> and did not proceed with DHCPREQUEST. Reason -- <string>

DHCP server <IP address> assigned interface <string> with IP address <IP address> (lease time <integer> minutes).


Information (00767)

System auto-config of file <string> from TFTP server <IP address> has failed.

System auto-config of file <string> from TFTP server <IP address> is loaded successfully.


DHCP6
----------------------------------------


Notification (00024)

DHCP6 client is <string> on interface <string> <string>.

DHCP6 server configured on <string> is <string>.

DHCP6 server options at <string> are <string>.

DHCP server IP address pool has changed.


Information (00527)

DHCP6: Client received <string> from <IP address>, xid %x.

DHCP6: Client send <string> from <string> <IP address> to <IP address>, xid %x len <integer>.

DHCP6: Client start at <string>.

DHCP6: Server received <string> from <IP address>, xid %x.

DHCP6: Server send <string> from <string> <IP address> to <IP address>, xid %x len <integer>.

DHCP6: Server send <string> from <string> <IP address> to <IP address>, xid %x len <integer>.

DHCP6 client error, received <integer> bits prefix with <integer> bits in sla id.


DIP, VIP, MIP, and Zones
----------------------------------------


Critical (00023)

VIP server <server_IP> cannot be contacted.


Critical (00102)

Utilization of DIP pool <dip_id> in vsys <vsys_name> hits raise threshold <threshold>%%.


Critical (00103)

Utilization of DIP pool <dip_id> in vsys <vsys_name> hits clear threshold <threshold>%%.


Notification (00010)

Mapped IP <is_ipv6><MIP_mapped_IP>-<is_ipv6><MIP_host_IP> <action> <changed_from>


Notification (00016)

VIP (<VIP_IP_Address>:<VIP_Port> <VIP_Service> <VIP_Host_Port>) <action> <changed_from>

VIP multi-port was disabled <changed_from>

VIP multi-port was enabled <changed_from>


Notification (00021)

DIP group <DIP_group_id> was created <changed_from>

DIP group <DIP_group_id> was removed <changed_from>

DIP IP pool <DIP_member_id> was removed from DIP group <DIP_group_id> <changed_from>

DIP IP pool <is_ipv6><DIP_min_range>-<is_ipv6><DIP_max_range> <action> <changed_from>

DIP pool <DIP_member_id> was added into DIP group <DIP_group_id> <changed_from>

DIP port-translation stickiness was <new_state> <changed_from>


Notification (00037)

Asymmetric vpn was <enabled_disabled> on zone <zone_name>.

Intra-zone block for zone <zone_name> was set to <string_on_off>

IP/TCP reassembly for ALG was <enabled_disabled> on zone <zone_name>.

New zone <zone_name> (ID <zone_id>) was created.

Tunnel zone <tzone_name> was bound to out zone <czone_name>

Zone <zone_name> (ID <zone_id>) was deleted.

Zone <zone_name> was bound to virtual router <vr_name>

Zone <zone_name> was changed to non-shared.

Zone <zone_name> was changed to shared.

Zone <zone_name> was unbound from virtual router <vr_name>


Notification (00533)

VIP server <server_IP> is now alive.

VIP server <server_IP> is now in manual mode.


DNS
----------------------------------------


Critical (00021)

Connection refused by the DNS server.

DNS server is not configured.

Unknown DNS error.


Notification (00004)

Daily DNS lookup has been disabled.

Daily DNS lookup time has been changed to start at <arg1>:<arg2> with an interval of <arg3> hours.

DNS cache table has been cleared.

DNS Proxy module has been disabled.

DNS Proxy module has been enabled.

DNS Proxy module has more concurrent client requests than allowed.

DNS Proxy server select table added with domain <string>, interf <string>, ip <string> <string> <string> <string>.

DNS Proxy server select table deleted with domain <string>.

DNS Proxy server select table enties exceeded max limit.

The { primary | secondary | ternary } DNS server IP address has been changed.

The { primary | secondary | ternary } DNS server IP address has been changed.

The { primary | secondary | ternary } DNS server IP address has been changed.


Notification (00029)

DNS has been refreshed.


Notification (00059)

Agent of DDNS entry with id <integer> is reset to its default value.

DDNS entry with id <integer> is configured with interface <string> host-name <string>.

DDNS entry with id <integer> is configured with server type <string> name <string> refresh-interval <integer> hours mininum update interval <integer> minutes with <string> secure connection.

DDNS entry with id <integer> is configured with user name <string> agent <string>.

DDNS entry with id <integer> is deleted.

DDNS module is disabled.

DDNS module is enabled.

DDNS module is initialized.

DDNS module is shut down.

DDNS server <string> returned incorrect ip <IP address>, local-ip should be <IP address>.

Error response received for DDNS entry update for id <integer> user <string> domain <string>, server type <string> name <string>.

Hostname of DDNS entry with id <integer> is cleared.

Minimum update interval of DDNS entry with id <integer> is set to default value (60 min).

No-Change response received for DDNS entry update for id <integer> user <string> domain <string> server type <string>, server name <string>.

Refresh interval of DDNS entry with id <integer> is set to default value (168 hours).

Source interface of DDNS entry with id <integer> is cleared.

Success response received for DDNS entry update for id <integer> user <string> domain <string> server type <string> name <string>.

Updates for DDNS entry with id <integer> are set to be sent in secure (https) mode.

Username and password of DDNS entry with id <integer> are cleared.


Notification (0059)

Server of DDNS entry with id <integer> is cleared.


Information (00004)

DNS entries have been automatically refreshed.

DNS entries have been manually refreshed.

DNS entries have been refreshed as result of DNS server address change.

DNS entries have been refreshed as result of external event.

DNS entries have been refreshed by HA.


Entitlement and System
----------------------------------------


Emergency (00093)

<attach_detatch>


Alert (00027)

License key <Key name> expired after 30-day grace period.

License key <Key name> has expired.

License key <Key name> is due to expire in 2 months.

License key <Key name> is due to expire in 2 weeks.

License key <Key name> is due to expire in a month.

Request to register the device failed to reach the server by <from>. Server url: <url>.

Request to retrieve license key failed to reach the server by <from>. Server url: <url>


Critical (00027)

New config includes invalid settings. System rolled back to LKG config.

<reset_log_str>


Critical (00051)

Session utilization has dropped below <number>, which is <percent>%% of the system capacity!

Session utilization has reached <number>, which is <percent>%% of the system capacity!


Critical (00080)

Cannot create a DI pool with a size of <integer> bytes.


Critical (00081)

Cannot allocate <integer> bytes of memory.


Critical (00850)

Session limit alarm has been cleared for vsys <vsys_name> (current <current_sess>, dropped packets <drop_sess>)

Session limit alarm has been set for vsys <vsys_name> (current <current_sess>, alarm threshold <alarm_sess>).


Error (00767)

can only do set alg _all as unset alg _all command has issued.


Notification (00002)

Session threshold has been changed to percentage <percent>


Notification (00006)

Domain set to <name>.

Hostname set to <name>.


Notification (00008)

System clock configurations have been changed <string>

System clock was changed manually from <previous_value>.

System up time shifted by <integer> seconds.


Notification (00036)

An optional ScreenOS feature has been activated via a software key.

No license key is available for retrieval by <from>.

Received identical license key by <from>.

Register device succeeded and warranty key is installed.

Retrieve firmware list failed.

Retrieve firmware list succeeded: <number> firmware.

Retrieve firmware list succeeded: <number> firmware.

<number> license keys were updated successfully by <from>.


Notification (00526)

The user limit has been exceeded and <ipv6><ipaddress> cannot be added.


Notification (00575)

<file_transfer>


Notification (00767)

Administrator <string> issued command <string> to redirect output.

Invalid configuration size (<config_size_limit>).

Session (id <sess_id>, <sess_src_dst_proto>) cleared: <sess_clr_cmd_issuer>

System is operational.

System was reset at <string>

Trial keys are available to download to enable advanced features. To find out, please visit http://www.juniper.net/products/subscription/trial/.

Unsupported command <string>


Information (00767)

All system configurations saved to <config_changer> by <admin>.

Daylight Saving Time ended.

Daylight Saving Time has started.

Environment variable <name> changed to <data>.

Environment variable <name> set to <data>.

Environment variable <name> unset.

Load file from usb <usb_filename> to flash <flash_filename> by administrator <admin>.

Lock configuration aborted because <integer> minute(s) timeout was exceeded.

Lock configuration aborted explicitly by task <string>.

Lock configuration ended by task <string>.

Lock configuration started by task <string>, with a timeout value of <integer> minute(s).

New GMT zone ahead or behind by <integer> seconds.

Save configuration to IP address <ip> under filename <filename> by administrator <admin>.

Save new software from <ip> under filename <filename> to flash memory <admin>.

Save new software from slot filename <slot_filename> to flash memory <admin>.

Save new software from usb filename <usb_filename> to flash memory by administrator <admin>.

Script Get-command has started.

Script Get-command has stopped.

Send file <flash_filename> from flash to usb <usb_filename> by administrator <admin>.

Send new software from flash memory to slot filename <slot_filename> by administrator <admin>.

Send new software from flash memory to usb filename <usb_filename> by administrator <admin>.

Send new software from IP address <ip> under filename <filename> to slot <slot_filename> by administrator <admin>.

Send new software from IP address <ip> under filename <filename> to usb <admin> by administrator <string>.

Send new software to IP address <ip> under filename <filename> by administrator <admin>.

System configuration saved <config_changer> by <admin>.

The system configuration was loaded from flash memory to <usb_filename> by administrator <admin>.

The system configuration was loaded from flash memory to slot <slot_filename> by administrator <admin>.

The system configuration was loaded from IP address <ip> under filename <filename> by administrator <admin>.

The system configuration was loaded from <ip> under the filename <filename> to slot <slot_filename> by administrator <admin>.

The system configuration was loaded from <ip> under the filename <filename> to usb <admin> by administrator <string>.

The system configuration was loaded from slot <admin>.

The system configuration was loaded from usb <usb_filename> by administrator <admin>.

The system configuration was not saved <string> by administrator <string>. It was locked by administrator <string>.

Timer <string> <string>


FIPs
----------------------------------------


Notification (00030)

FIPS error <string> error code <integer>.


Flow
----------------------------------------


Alert (00800)

Shared to fair transition forced.


Alert (00801)

Shared to fair transition: utilization <utilization> >= threshold <threshold>.


Critical (00802)

Fair to shared transition forced.


Critical (00803)

Fair to shared transition: time limit exceeded.


Critical (00804)

Fair to shared transition: utilization <utilization> < threshold <threshold>.


Notification (00002)

(<string>/<string>) set vlan port <string> group <string> zone <string>.

(<string>/<string>) <string> vlan group name <string>.

(<string>/<string>) <string> vlan group <string> <integer> <integer>.

(<string>/<string>) <string> vlan import <integer> <integer>.

(<string>/<string>) unset vlan port <string> group <string>.

Transparent virutal wire mode has been <state>.


Notification (00040)

Aggressive age-out value has been changed from <integer> to <integer>.

High watermark for early aging has been changed from <integer> to <integer>.

High watermark for early aging has been changed to the default (<integer>).

Low watermark for early aging has been changed from <integer> to <integer>.

Low watermark for early aging has been changed to the default (<integer>).

The aggressive age-out value has been changed to the default (<integer>).


Notification (00079)

CPU limit <state>.

Desired fair mode changed from <old> to <new>.

Fair to shared hold-down time changed from <old> to <new>.

Fair to shared threshold changed from <old> to <new>.

Fair to shared time changed from <old> to <new>.

Shared to fair hold-down time changed from <old> to <new>.

Shared to fair threshold changed from <old> to <new>.


Notification (00085)

Flow <clear-text or tunnel> reverse-route changed from <old> to <new>.


Notification (00573)

Running in Infranet Test mode: Allow packet. In Regular mode, would drop packet on Infranet authentication policy because Infranet auth table denied it. Source IP <src_ip>, Destination IP <dst_ip>, Policy ID <policy_id>.

Running in Infranet Test mode: Allow packet. In Regular mode, would drop packet on Infranet authentication policy because Infranet Controller timeout occurred and time-out action was 'close'. Source IP <src_ip>, Destination IP <dst_ip>, Policy ID <policy_id>.

Running in Infranet Test mode: Allow packet. In Regular mode, would drop packet on Infranet authentication policy because there is no Infranet auth table entry. Source IP <src_ip>, Destination IP <dst_ip>, Policy ID <policy_id>.

Running in Infranet Test mode: Allow packet on Infranet authentication policy. Infranet Controller timeout occurred, time-out action was 'open'. Source IP <src_ip>, Destination IP <dst_ip>, Policy ID <policy_id>.

Running in Infranet Test mode: Infranet authentication succeeded, let the packet through. Source IP <src_ip>, Destination IP <dst_ip>, Policy ID <policy_id>.


Notification (00601)

IP action detected attack attempt <state>.


Frame Relay
----------------------------------------


Alert (00085)

[mlfr/lip]: <interfacename> detected loop <times> times.

[mlfr/lip]: the bid <lrxbid> in the ADD_LINK packet from link <linkname> is inconsistent with the received bid <brxbid> on the bundle <bundlename>.


Notification (00074)

[fr/cfg]: <interface>: <config>

[fr/cfg]: <interface>: <config>

[fr/cfg]: <interface> LMI: set <param_name> to <value>.

[fr/cfg]: <interface> LMI: set to <proc>.


Notification (00075)

[mlfr/cfg]: add link <linkname> to bundle <bundlename>.

[mlfr/cfg]: delete link <linkname> from bundle <bundlename>.

[mlfr/cfg]: set interface <interfacename> encap as mlfr-uni-nni.

[mlfr/cfg]: set lip acknowledge-retries as <ackretries> for bundle link <interfacename>.

[mlfr/cfg]: set lip acknowledge-timer as <acktimer>(s) for bundle link <interfacename>.

[mlfr/cfg]: set lip fragment-threshold as <frag> for bundle link <interfacename>.

[mlfr/cfg]: set lip hello-timer as <hello-timer>(s) for bundle link <interfacename>.

[mlfr/cfg]: set MLFR bundle-id as <bundle-id> for multilink interface <interfacename>.

[mlfr/cfg]: set MLFR drop-timeout as <droptime> for multilink interface <interfacename>.

[mlfr/cfg]: set MLFR minimum-links as <links> for multilink interface <interfacename>.

[mlfr/cfg]: unset bundle link <interfacename> lip fragment-threshold to <mtu>.

[mlfr/cfg]: unset interface <interfacename> encap from mlfr-uni-nni.

[mlfr/cfg]: unset lip acknowledge-retries to default <ackretries> for bundle link <interfacename>.

[mlfr/cfg]: unset lip acknowledge-timer to default <acktimer>(s) for bundle link <interfacename>.

[mlfr/cfg]: unset lip hello-timer to default <hello-timer>(s) for bundle link <interfacename>.

[mlfr/cfg]: unset MLFR bundle-id as the name of multilink interface <interfacename>.

[mlfr/cfg]: unset MLFR drop-timeout to 0 (disable) for multilink interface <interfacename>.

[mlfr/cfg]: unset MLFR minimum-links to default (1) for multilink interface <interfacename>.


Notification (00086)

[fr/lmi]: <interface>: LMI link is down due to errors over threshhold (n392).


Notification (00569)

[fr/lmi]: <interface> dlci(<dlci>) status changed to <state>.

[fr/lmi]: <interface> LMI status changed to <state>.


Notification (00570)

[mlfr/lip]: change bundle <bundlename> physical status to down.

[mlfr/lip]: changed bundle <bundlename> physical status to up.

[mlfr/lip]: link interface <linkname> LIP is down at bundle <bundlename>.

[mlfr/lip]: link interface <linkname> LIP is up at bundle <bundlename>.

[mlfr/lip]: <linkname> LIP FSM: (<oldstate> -> <newstate>) by event (<event>).


GTP
----------------------------------------


Notification (00065)

GTP <string>; <string>

GTP sets <string> <integer>; <string>

GTP <string> <string>; <string>


Notification (00567)

GTP <string>

GTP <string>; <string>

<string>


Notification (00568)

<string>

Trace <integer>: <string>


H.323
----------------------------------------


Alert (00089)

The number of RAS request messages sent to the GK, <gk_ip>, exceeds the threshold, <ras_flooding_msg_threshold>.


Notification (00619)

Concurrent H.323 calls exceeding maximum limit: <max_h323_call_num>.

Failed to allocate memory for H.323 call context objects. Call dropped

Failed to get NAT cookie. Too many concurrent H.323 calls: <active_h323_call_num>. Call dropped.


HDLC
----------------------------------------


Notification (00539)

Dialup HDLC PPP failed to establish a session: <reason string>.

Dialup HDLC PPP failed to establish a session. No IP address assigned.

Dialup HDLC PPP session has been successfully established.


High Availability
----------------------------------------


Critical (00015)

NSRP: <string>.

NSRP: <string> <string>.

Peer device <integer> disappeared.

Peer device <integer> was discovered.

Peer device <integer> in the Virtual Security Device group <integer> changed state from <string> to <string>.

RTO mirror group <integer> with direction <string> on local device <integer>, detected a duplicate direction on the peer device <integer>.

The NSRP configuration is out of synchronization between the local device and the peer device.


Critical (00060)

RTO mirror group <integer> with direction <string> changed on the local device from <string> to <string> state, it had peer device <integer>.


Critical (00061)

RTO mirror group <integer> with direction <string> on peer device <integer> changed from <string> to <string> state, <string>.


Critical (00062)

Device cannot create Track IP list.

Device cannot create Track IP object list.

No interface/route enables the Track IP IP address <IP address> to be transmitted.

Track IP failure reached threshold.

Track IP IP address <IP address> failed.

Track IP IP address <IP address> succeeded.


Critical (00070)

The local device <integer> in the Virtual Security Device group <integer> changed state from <string> to <string>, <string>.

The local device <integer> in the Virtual Security Device group <integer> changed state from <string> to <string>.


Critical (00071)

The local device <integer> in the Virtual Security Device group (<integer>) changed state from <string> to <string>, <string>.


Critical (00072)

The local device <integer> in the Virtual Security Device group (<integer>) changed state from <string> to <string>, <string>.


Critical (00073)

The local device <integer> in the Virtual Security Device group (<integer>) changed state from <string> to <string>, <string>.


Critical (00074)

The local device <unit_id> in the Virtual Security Device group <group_id> changed state from <state_old> to <state_new>, <string>.


Critical (00075)

The local device <integer> in the Virtual Security Device group <integer> changed state from <string> to <string>.


Critical (00076)

The local device <integer> in the Virtual Security Device group <integer> sent a 2nd path request to the peer device <integer>.


Critical (00077)

The local device <integer> in the Virtual Security Device group <integer> received a 2nd path request from peer device <integer> to device <integer>.


Notification (00007)

A request by device <integer> for session synchronization(s) was accepted.

Device <int_old> has joined NSRP cluster <int_new> <string>.

Device <unit_id> quit current NSRP cluster <cluster_id> <string>.

Interface <string> was removed from the monitoring list for <string>.

Interface <string> with weight <integer> was added to or updated on the monitoring list for <string>.

Message <msg_type_name> was dropped because it contained an invalid encryption password.

NSRP: <string>.

NSRP black hole prevention disabled. Master(s) of Virtual Security Device groups might not exist.

NSRP black hole prevention enabled. Master(s) of Virtual Security Device groups always exists.

NSRP cluster authentication password changed.

NSRP cluster encryption password changed.

NSRP data forwarding was disabled.

NSRP data forwarding was enabled.

NSRP Run Time Object synchronization between devices was disabled.

NSRP Run Time Object synchronization between devices was enabled.

NSRP transparent Active-Active mode was disabled.

NSRP transparent Active-Active mode was enabled.

RTO mirror group <integer> was unset.

Run Time Object mirror group <integer> direction was set to <string>.

Run Time Object mirror group <integer> was set.

Run Time Object mirror group <integer> with direction <string> was unset.

The current session synchronization by device <integer> completed.

The HA channel changed to interface <interface_name>.

The heartbeat interval of all Virtual Security Device groups changed from <int_old> (milliseconds) to <int_new> (milliseconds).

The interface <string> with ifnum <integer> was removed from the secondary HA path of the devices.

The interval of the probe detecting the status of High Availability link <string> was set to <integer> seconds.

The monitoring threshold was modified to <integer> for <string>.

The NSRP encryption key was changed.

The probe that detects the status of High Availability link <string> was disabled.

The secondary HA path of the devices changed from <string> to <string>.

The secondary HA path of the devices was set to interface <string>, with ifnum <integer>.

The threshold of the probe detecting the status of High Availability link <string> was set to <integer>.

Virtual Security Device group <vsd_id> changed to non-preempt mode.

Virtual Security Device group <vsd_id> changed to preempt mode.

Virtual Security Device group <integer> priority changed from <integer> to <integer>.

Virtual Security Device group <unit_id> was created. The total number of members in the group is <cluster_id>.

Virtual Security Device group <unit_id> was deleted. The total number of members in the group was <cluster_id>.

Zone <string> was removed from the monitoring list for <string>.

Zone <string> with weight <integer> was added to or updated on the monitoring list for <string>.


Notification (00050)

Track default gateway disabled.

Track IP default gateway enabled.

Track IP default gateway updated.

Track IP <IP address> gateway was changed from gateway IP address <IP address> to <IP address>.

Track IP <IP address> gateway was changed from gateway IP address <IP address> to the interface default gateway.

Track IP <IP address> gateway was changed from the interface default gateway to gateway IP address <IP address>.

Track IP <vsd_id> interface changed from <string> to <string>.

Track IP <IP address> interval changed from <integer> to <integer>.

Track IP <IP address> method changed from method name <string> to <string>

Track IP IP address <IP address> added with an interval of <integer> seconds, a threshold of <integer>, a weight of <integer> on interface <string> using method <string>.

Track IP IP address <IP address> removed.

Track IP <IP address> threshold value changed from <integer> to <integer>.

Track IP <IP address> weight changed from <integer> to <integer>.

Track IP object <string> weight value set to <integer>.

Track IP object <string> weight value set to default.

Track IP <string>

Track IP threshold set to <integer>.

Track IP threshold set to default.


Notification (00084)

RTSYNC: NSRP route synchronization is disabled.

RTSYNC: NSRP route synchronization is enabled.


Notification (00620)

RTSYNC: Event posted to purge backup routes in all vrouters.

RTSYNC: Event posted to send all the DRP routes to backup device.

RTSYNC: Recieved coldstart request for route synchronization from NSRP peer.

RTSYNC: Serviced coldstart request for route synchronization from NSRP peer.

RTSYNC: Started timer to purge all the DRP backup routes - <purge_time_in_seconds> seconds.

RTSYNC: Timer to purge the DRP backup routes is stopped.


Information (00767)

HA: Synchronization file(s) <filename> sent to backup device in cluster.


IGMP
----------------------------------------


Notification (00055)

IGMP all groups static flag was removed on interface <string>.

IGMP function was disabled on interface <string>.

IGMP function was enabled on interface <string>.

IGMP group <IP address> static flag was added on interface <string>.

IGMP group <IP address> static flag was removed on interface <string>.

IGMP groups accept list ID was changed to <integer> on interface <string>.

IGMP host instance was created on interface <string>.

IGMP host instance was deleted on interface <string>.

IGMP hosts accept list ID was changed to <integer> on interface <string>.

IGMP last member query interval was changed to <integer> seconds on interface <string>.

IGMP leave interval was changed to <integer> seconds on interface <string>.

IGMP proxy always is disabled on interface <string>.

IGMP proxy always is enabled on interface <string>.

IGMP proxy was disabled on interface <string>.

IGMP proxy was enabled on interface <string>.

IGMP query interval was changed to <integer> seconds on interface <string>.

IGMP query max response time was changed to <integer> seconds on interface <string>.

IGMP router instance was created on interface <string>.

IGMP router instance was deleted on interface <string>.

IGMP routers accept list ID was changed to <integer> on interface <string>.

IGMP static group <IP address> was added on interface <string>.

IGMP version was changed to V<integer> on interface <string>.

IGMP will do router alert IP option check on interface <string>.

IGMP will do same subnet check on interface <string>.

IGMP will not do router alert IP option check on interface <string>.

IGMP will not do same subnet check on interface <string>.


IKE
----------------------------------------


Alert (00026)

IKE <gateway_ip><IP address>: Policy Manager's default CA is used by peer to establish an IPSec VPN.

IPSec tunnel on interface <if_name> with tunnel ID 0x<sa_tid_hex> received a packet with a bad SPI. <src_ip><dst_ip>-><pak_len><esp_or_ah>/<spi_hex>, <seq_number_hex>, SPI 0x%x, SEQ 0x%x.


Alert (00048)

Number of IAS crossed configured upper threshold <ias_upper>.


Alert (00049)

Number of IAS crossed configured lower threshold <ias_lower>.


Critical (00042)

Replay packet detected on IPSec tunnel on <if_name> with tunnel ID 0x<sa_tid_hex>! From <src_ip> to <dst_ip>/<pak_len>, <esp_or_ah>, SPI 0x<spi_hex>, SEQ 0x<seq_number_hex>.


Critical (00111)

Attack alarm: IKE ID enumeration attack on interface <if_name> from src_ip <src_ip><IP address>.


Critical (00114)

ACVPN: Error in received profile from hub in vr <vr-name>: <error_buf>.


Error (00047)

The number of IAS exceeds the configured maximum <ias_max>.


Error (00050)

IAS for peer <peer_ip><ias_ike_error_log> has IKE error: <string>.


Error (00110)

IAS for peer <peer_ip><ias_ike_error_log> has IKE error: <string>.


Error (00536)

IAS for peer <peer_ip><xauth_uname> and XAUTH user <string> activated.

IAS for peer <peer_ip><xauth_uname> and XAUTH user <ternimate_cause> terminated by <string>.


Notification (00017)

Gateway <gateway_name> at <gateway_ip><IKE_XCHG_mode> in <peer_id> mode with ID <action> <by_whom> <string>.

P1 proposal <proposal_name> with <auth_method>, DH group <DH_group>, ESP <ESP_enc_method>, auth <ESP_auth_method>, and lifetime <lifetime> <action> <by_whom>.

P2 proposal <proposal_name> with DH group <DH_group>, <protocol>, enc <ESP_enc_method>, auth <ESP_auth_method>, and lifetime (<lifetime> sec/<lifesize> KB) <action> <by_whom>.


Information (00536)

An initial Phase 1 packet arrived from an unrecognized peer gateway

An unencrypted packet unexpectedly arrived

An unexpected encrypted packet arrived

A Phase 2 packet arrived while XAuth was still pending

A required payload was missing

IAS for peer <peer_ip><xauth_uname> and XAUTH user <string> activated.

IAS for peer <peer_ip><xauth_uname> and XAUTH user <ternimate_cause> terminated by <string>.

IKE: Removed Phase 2 SAs after receiving a notification message.

IKE: User <user_name> with ID <user_id> requested a connection.

IKE: XAuth assign dns1 <DNS1 ip address> dns2 <DNS2 ip address> wins1 <wins1 ip address> wins2 <wins2 ip address>.

IKE: XAuth assign DNS <DNS ip address pointer>.

IKE: XAuth assign prefix <prefix ip address pointer>/<prefix length> to interface <interface name>.

IKE: XAuth assign prefix <prefix ip address pointer>/<prefix length> to interface <interface name> failed.

IKE: XAuth IP pool <pool name> not configured.

IKE: XAuth no more IP addresses in IP pool <pool name>.

IKE<<gateway_ip><IP address>> Phase 1: IKE initiator has detected NAT in front of the local device.

IKE<<gateway_ip><IP address>> Phase 1: IKE initiator has detected NAT in front of the remote device.

IKE<<gateway_ip><IP address>> Phase 1: IKE responder has detected NAT in front of the local device.

IKE<<gateway_ip><IP address>> Phase 1: IKE responder has detected NAT in front of the remote device.

IKE DPD configuration changed, <configure_item_name>

IKE DPD found peer at <peer IP><IP address> not responding.

IKE gateway <gateway_name> has been disabled. The peer address <peer_addr_name> cannot be resolved to an IP address.

IKE gateway <gateway_name> has been disabled because the peer IP address <peer_ip><gateway_name> is already in use by another IKE gateway on interface <interface_name>.

IKE gateway <gateway_name> has been enabled. The peer address <peer_addr_name> has been resolved to <peer_ip><IP address>.

IKE <gateway_ip><IP address>: Added Phase 2 session tasks to the task list.

IKE <gateway_ip><IP address>: Added the initial contact task to the task list.

IKE <gateway_ip><new_sa_tunnel_id>: An SA (ID <policy_id>) with a higher weight replaced the SA (ID <old_sa_tunnel_id>) in policy ID <integer>.

IKE <gateway_ip><heartbeat_interval>: Changed heartbeat interval to <integer>.

IKE <gateway_ip><IP address>: Dropped a packet from the peer because no policy permits it.

IKE <gateway_ip><IP address>: Heartbeats have been disabled because the peer is not sending them.

IKE <gateway_ip><count>: Heartbeats have been lost <integer> times.

IKE <gateway_ip><IP address>: Missing heartbeats have exceeded the threshold. All Phase 1 and 2 SAs have been removed.

IKE <gateway_ip><new_sa_tunnel_id>: New SA (ID <policy_id>) is up. Switch policy ID <old_sa_tunnel_id> from SA <integer>.

IKE <gateway_ip><cookie_byte_1>: Phase 1 SA (my cookie:<cookie_byte_2>x) was removed due to a simultaneous rekey.

IKE <gateway_ip><message_id>: Phase 2 msg ID <lifetime>x: Received responder lifetime notification. (<lifesize> sec/<integer> KB)

IKE <gateway_ip><IP address>: Phase 2 negotiation request is already in the task list.

IKE <gateway_ip><doi_number>: Received a notification message for DOI <message_type> <message_text> <string>.

IKE <gateway_ip><payload_type>: Received a TRNXTN_XCHG payload with type <integer>.

IKE <gateway_ip><IP address>: Received initial contact notification and removed Phase 1 SAs.

IKE <gateway_ip><IP address>: Received initial contact notification and removed Phase 2 SAs.

IKE <gateway_ip><IP address>: Sent an initial contact notification message because of a bad SPI.

IKE <gateway_ip><IP address>: Sent initial contact notification to peer to use a new SA.

IKE <gateway_ip><IP address>: The initial contact task is already in the task list.

IKE <gateway_ip><user_name>: User <share_limit> has exceeded the configured share-limit of <integer>.

IKE <gateway_ip><user_name>: XAuth login expired and was terminated for username <user_ip> at %P<IP address>/%P<IP address>>.

IKE <gateway_ip><gateway_name>: XAuth login failed for gateway <user_name>, username <retry_count>, retry: <timeout>, timeout: <integer>.

IKE <gateway_ip><gateway_name>: XAuth login was aborted for gateway <user_name>, username <retry_count>, retry: <integer>.

IKE <gateway_ip><gateway_name>: XAuth login was passed for gateway <user_name>, username <retry_count>, retry: <client_ip>, Client IP Addr <ippool_name><session_timeout>, IPPool name: <idle_timeout>, Session-Timeout: <integer>s, Idle-Timeout: <integer>s.

IKE <gateway_ip><user_name>: XAuth login was refreshed for username <user_ip> at %P<IP address>/%P<IP address>.

IKE<gateway_ip><old_gateway_ip>: XAuth login was terminated because the user logged in again. Previous gateway: <user_name><user_ip>. Username: <user_mask> at <IP address>/<IP address>.

IKE <gateway_ip><p1_state_mask> Phase 1: Aborted negotiations because the time limit has elapsed. (<p1_state>x/<integer>)

IKE <gateway_ip><IP address> Phase 1: Aggressive mode negotiations have failed.

IKE <gateway_ip><gateway_name> Phase 1: Cannot use a preshared key because the peer gateway <string> has a dynamic IP address and negotiations are in Main mode.

IKE <gateway_ip><IP address> Phase 1: Cannot verify DSA signature.

IKE<gateway_ip><IP address> Phase 1: Cannot verify RSA signature.

IKE <gateway_ip><IP address> Phase 1: Cert received has a different FQDN SubAltName than expected.

IKE <gateway_ip><IP address> Phase 1: Cert received has a different IP address SubAltName than expected.

IKE <gateway_ip><IP address> Phase 1: Cert received has a different UFQDN SubAltName than expected.

IKE <gateway_ip><IP address> Phase 1: Cert received has a subject name that does not match the ID payload.

IKE <gateway_ip><lifetime> Phase 1: Completed Aggressive mode negotiations with a <integer>-second lifetime.

IKE <gateway_ip><user_name> Phase 1: Completed for user <string>.

IKE <gateway_ip><lifetime> Phase 1: Completed Main mode negotiations with a <integer>-second lifetime.

IKE <gateway_ip><IP address> Phase 1: Discarded a second initial packet, which arrived within 5 seconds after the first.

IKE <gateway_ip><ongoing_sessions> Phase 1: Discarded peer's P1 request because there are currently <max_allowed> sessions--max is <integer>.

IKE <gateway_ip><IP address> Phase 1: Main mode negotiations have failed.

IKE<gateway_ip><user_name> Phase 1: Negotiations have failed for user <string>.

IKE <gateway_ip><IP address> Phase 1: No private key exists to sign packets.

IKE <gateway_ip><IP address> Phase 1: Received an incorrect public key authentication method.

IKE <gateway_ip><phase_1_mode> Phase 1: Responder starts <string> mode negotiations.

IKE <gateway_ip><IP address> Phase 1: Retransmission limit has been reached.

IKE <gateway_ip><p1_state_mask> Phase 2: Aborted negotiations because the time limit has elapsed. (<p1_state>x/<session_id>, session ID %8x)

IKE <gateway_ip><IP address> Phase 2: Initiated negotiations.

IKE <gateway_ip><IP address> Phase 2: Negotiations have failed. Policy-checking has been disabled but multiple VPN policies to the peer exist.

IKE <gateway_ip><local IP> Phase 2: No policy exists for the proxy ID received: local ID (<local mask><local protocol>/<local port><remote IP>, <remote mask>, <remote protocol>) remote ID (<remote port><IP address>/%P<IP address>, <integer>, <integer>).

IKE <gateway_ip><IP address> Phase 2: Received a message but did not check a policy because id-mode was set to IP or policy-checking was disabled.

IKE <gateway_ip><dh_group_actual> Phase 2: Received DH group <dh_group_expected> instead of expected group <integer> for PFS.

IKE <gateway_ip><message_id> Phase 2 msg-id <user_name>x: Completed for user <string>.

IKE <gateway_ip><message_id> Phase 2 msg ID <spi>x: Completed negotiations with SPI <tunnel_id>x, tunnel ID <lifetime>, and lifetime <lifesize> seconds/<integer> KB.

IKE <gateway_ip><message_id> Phase 2 msg ID %8x: Negotiations have failed.

IKE <gateway_ip><message_id> Phase 2 msg ID <user_name>x: Negotiations have failed for user <string>.

IKE <gateway_ip><message_id> Phase 2 msg ID %8x: Responded to the peer's first message.

IKE <gateway_ip><message_id> Phase 2 msg ID <user_name>x: Responded to the peer's first message from user <string>.

IKE<source_ip><dest_ip> <phase_1_mode><IP address> Phase 1: Initiated negotiations in <string> mode.

No VPN tunnel references the gateway

Phase-1: no user configuration was found for the received IKE ID type:

Phase 1 negotiations failed. (The preshared keys might not match.)

Received an IKE packet on <interface_name> from <src_ip><src_port>:<dest_ip> to <dest_port><pak_len>:<init_cookie>/<resp_cookie>. Cookies: <string>, <string>.

Rejected an IKE packet on <interface_name> from <src_ip><src_port>:<dest_ip> to <dest_port><init_cookie>:<resp_cookie> with cookies <reason> and <msg_pad1> because <msg_str><msg_pad2><msg_val><string><string>.

ScreenOS does not support the ID payload type:

The exchange modes (main or aggressive) do not match

The format used did not match the exchange mode indicated:

The IKE INFO exchange mode hash payload was invalid

The IKE packet length was inconsistent

The IKE packet unexpectedly had a floated port number

The IKE packet unexpectedly had a port number that was not floated.

The IKE QM exchange mode hash payload was invalid

The IKE Transaction exchange mode hash payload was invalid

The notify message was in clear text:

The peer did not send a proxy ID

The peer sent a duplicate message

The peer sent a malformed payload:

The peer sent a nonexistent cookie pair:

The peer sent a packet with a message ID before Phase 1 authentication was done

The peer sent a proxy ID that did not match the one in the SA config

The peer sent the incorrect IKE ID payload:

The peer sent the incorrect IKE ID payload type:

The peer used an invalid IKE header format.

The peer used an unsupported exchange mode:

There was an error when processing the payload

There was an error when sending a reply to the socket

There was a preexisting session from the same peer

There was no KE payload for PFS

There were no acceptable Phase 1 proposals

There were no acceptable Phase 2 proposals.

The specified responder cookie does not exist

The VPN does not have an application SA configured


Interface
----------------------------------------


Critical (00090)

Failover to secondary untrust interface occurred.

Recovery to primary untrust interface occurred.


Critical (00091)

L3 backup failover from interface <pri_if_name> to interface <bak_if_name>.

L3 backup recover from interface <bak_if_name> to interface <pri_if_name>.


Notification (00009)

802.1Q VLAN tag <interface_tag> has been created.

802.1Q VLAN tag <interface_tag> has been removed.

Activation delay for interface <pri_if_name> has been changed to <activation_delay>.

Admin status for interface <interface_name> has been changed to <value>.

Auto-failover for interface <pri_if_name> has been changed to <auto_state>.

Deactivation delay for interface <pri_if_name> has been changed to <deactivation_delay>.

DNS proxy was <new_status> on interface <interface_name>.

Interface <interface_name> 802.1Q tag has been changed to <interface_tag> <changed_from>.

Interface <interface_name> 802.1Q tag has been removed <changed_from>.

Interface <interface_name> 802.1Q VLAN trunking has been turned OFF <changed_from>.

Interface <interface_name> 802.1Q VLAN trunking has been turned ON <changed_from>.

Interface <interface_name> bandwidth has been changed to <bandwidth> Kbps.

Interface <interface_name> gateway IP has been changed from <old_interface_gateway_IP> to <new_interface_gateway_IP> <changed_from>.

Interface <interface_name> has been added to aggregate interface <aggregate_interface_name>.

Interface <interface_name> has been added to redundant interface <redundant_interface_name>.

Interface <interface_name> has been added to shared interface <shared_interface_name>.

Interface <interface_name> has been changed from local to VSI.

Interface <interface_name> has been changed from VSI to local.

Interface <interface_name> has been removed from aggregate interface <aggregate_interface_name>.

Interface <interface_name> has been removed from redundant interface <redundant_interface_name>.

Interface <interface_name> has been removed from shared interface <shared_interface_name>.

Interface <interface_name> holddown time interval has been set to <holddown_time>.

Interface <interface_name> in <vsys_name> was removed <changed_from>.

Interface <interface_name> in <vsys_name> with IP <interface_IP> mask <interface_netmask> tag <interface_tag> was created <changed_from>.

Interface <interface_name> in <vsys_name> with IP <interface_IP> mask <interface_netmask> was created <changed_from>.

Interface <interface_name> IP address can be used to manage the device.

Interface <interface_name> IP address cannot be used to manage the device.

Interface <interface_name> IP has been changed from <old_interface_IP> to <new_interface_IP> <changed_from>.

Interface <interface_name> management IP has been changed from <old_management_IP> to <new_management_IP> <changed_from>.

Interface <interface_name> netmask has been changed from <old_interface_netmask> to <new_interface_netmask> <changed_from>.

Interface <interface_name> operational mode has been changed to <operational_mode> <changed_from>.

Interface <interface_name> switching to ANSI T1.413 Issue 2 mode.

Interface <interface_name> switching to auto-negotiating mode.

Interface <interface_name> switching to G.Lite mode.

Interface <interface_name> switching to ITU G.992.1 mode.

Interface <interface_name> switching to ITU G.992.3 del test mode.

Interface <interface_name> switching to ITU G.992.3 mode.

Interface <interface_name> switching to ITU G.992.5 del test mode.

Interface <interface_name> switching to ITU G.992.5 mode.

Interface <interface_name> switching to loopback mode.

Interface <interface_name> was bound to zone <zone_name> <changed_from>.

Interface <interface_name> was removed from the monitoring list of <interface_name2>.

Interface <interface_name> was unbound from zone <zone_name> <changed_from>.

Interface <interface_name> with weight <weight> was added to the monitoring list of <interface2_name>.

IPv4 Path-MTU has been <new_status> on interface <interface_name> <changed_from>.

IPv6 Path-MTU has been <new_status> on interface <interface_name> <changed_from>.

Maximum bandwidth <maximum_bandwidth> Kbps on interface <interface_name> is less than total guaranteed bandwidth <guaranteed_bandwidth> Kbps.

Monitoring threshold was modified to <threshold> of <interface_name>.

Mtrace has been <new_status> on interface <interface_name> <changed_from>.

MTU for interface <interface_name> has been changed to <mtu>.

Primary interface <pri_if_name> set backup interface <bak_if_name>, type is <type>.

Primary interface <pri_if_name> unset backup interface <bak_if_name>.

Route between secondary IP addresses on interface <interface_name> has been disabled.

Route between secondary IP addresses on interface <interface_name> has been enabled.

Secondary IP address <IP>/<netmask> has been added to interface <interface_name>.

Secondary IP address <IP> has been deleted from interface <interface_name>.

<phy_name> for interface <interface_name> has been changed to <value>.

Zone <zone_name> was removed from the monitoring list of <interface_name>.

Zone <zone_name> with weight <weight> was added to the monitoring list of <interface_name>.


Notification (00078)

A dialer CLI is configured: <cli_string>.


Notification (00513)

The physical state of interface <interface_name> has changed to <new_state>.


Notification (00613)

Interface <interface_name> dialed out at channel <channel>.

Interface <interface_name> disconnects at channel <channel>.

Interface <interface_name> idle timer expired.

Interface <interface_name> is connected at channel <channel>.

Interface <interface_name> is disconnecting at channel <channel>.

Interface <interface_name> traffic (<traffic> bps) decreased (less than load-threshold).

Interface <interface_name> traffic (<traffic> bps) increased (greater than load-threshold).


Information (00009)

Global-PRO has been <new_status> on interface <interface_name> <changed_from>.

Ident-reset has been <new_status> on interface <interface_name> <changed_from>.

NSGP <enforcing_IPSec> has been <new_status> on interface <interface_name> <changed_from>.

Ping has been <new_status> on interface <interface_name> <changed_from>.

SCS has been <new_status> on interface <interface_name> <changed_from>.

SNMP has been <new_status> on interface <interface_name> <changed_from>.

SSL has been <new_status> on interface <interface_name> <changed_from>.

Telnet has been <new_status> on interface <interface_name> <changed_from>.

Web has been <new_status> on interface <interface_name> <changed_from>.


Interface6
----------------------------------------


Critical (00101)

DAD detected duplicates for IPv6 address <IP address> on interface <string>


Notification (00009)

Setting interface <interface_name> IPv6 mode to <mode>.

<new_status> IPv6 function on the interface <interface_name>.

Unsetting IPv6 mode on interface <interface_name>.


Notification (00071)

DAD completed for IPv6 address <IP address> on interface <string>

Initialized IPv6 address <IP address> on interface <string>


Notification (00072)

IPv6 Router advertisement reception disabled on interface <string>

IPv6 Router advertisement reception enabled on interface <string>

IPv6 Router advertisement transmission disabled on interface <string>

IPv6 Router advertisement transmission enabled on interface <string>


ISDN
----------------------------------------


Notification (00083)

[isdn] Interface <interfacename> is configured for leased-line <speed>.

[isdn] Interface <interfacename> is configured to work with switch type <switch_type_name> (after reboot).

[isdn] Interface <interfacename> is set for TEI negotiation at <tei_negotiation_time>.

[isdn] Interface <interfacename> will not send Sending Complete in SETUP message.

[isdn] Interface <interfacename> will send Sending Complete in SETUP message.

[isdn] Leased-line is removed for interface <interfacename>.

[isdn] SPID1 for interface <interfacename> is set to <spid>.

[isdn] SPID2 for interface <interfacename> is set to <spid>.

[isdn] The calling number for interface <interfacename> is set to <calling_number>.

[isdn] The T310 value for interface <interfacename> is changed from <t310_old> to <t310_new>.


Notification (00618)

[isdn] Interface <d_channel> connected on B channel <b_channel>.

[isdn] Interface <d_channel> disconnected on B channel <b_channel>.

[isdn] Layer2 is <status> on D channel <d_channel>.


L2TP
----------------------------------------


Alert (00043)

Receive StopCCN_msg, remove l2tp tunnel (<local_ip>-<peer_ip>), Result code <result_code> (<result_code_str>).


Alert (00044)

Receive StopCCN_msg, remove l2tp tunnel (<local_ip>-<peer_ip>), Result code <result_code> (<result_code_str>), Error code <error_code> (<error_code_str>).


Alert (00045)

Receive CDN_msg, remove l2tp call, id = <call_id>, user = <user_name>, assigned ip = <assigned_ip>, Result code <result_code> (<result_code_str>).


Alert (00046)

Receive CDN_msg, remove l2tp call, id = <call_id>, user = <user_name>, assigned ip = <assigned_ip>, Result code <result_code> (<result_code_str>), Error code <error_code> (<error_code_str>).


Notification (00017)

L2TP <l2tp_name>, all-L2TP-users secret <secret> keepalive <keepalive> <action> <by_whom>.

L2TP <l2tp_name>, <user_or_group> ID <user_id> secret <secret> keepalive <keepalive> <action> <by_whom>.

L2TP default auth type changed to <auth_type>.

L2TP default ippool changed from <old_ippool_name> to <new_ippool_name>.

L2TP default PPP auth type changed to <ppp_auth_type>.

L2TP default primary DNS server changed from <old_ip> to <new_ip>.

L2TP default primary WINS server changed from <old_ip> to <new_ip>.

L2TP default RADIUS port changed to <radius_port>.

L2TP default RADIUS secret changed to <radius_secret>.

L2TP default RADIUS server changed to <radius_server>.

L2TP default secondary DNS server changed from <old_ip> to <new_ip>.

L2TP default secondary WINS server changed from <old_ip> to <new_ip>.

L2TP ippool is unset to default.

L2TP primary DNS server is unset to default.

L2TP primary WINS server is unset to default.

L2TP RADIUS port changed to <radius_port>.

L2TP RADIUS secret is unset to default.

L2TP RADIUS server is unset to default.

L2TP secondary DNS server is unset to default.

L2TP secondary WINS server is unset to default.


Information (00536)

Incorrect L2TP secret in tunnel authentication for L2TP (<peer_ip>).

l2tp(<local_ip>/<local_port>-><peer_ip>/<peer_port>), user authentication passed. IP address <assigned_ip> assigned to user.

L2TP at <peer_ip> PPP failed, Failure in <error_code>.

L2TP tunnel <l2tp_name> created between <local_ip>:<local_port> and <peer_ip>:<peer_port>.

Retry time-out interval expired. L2TP call (peer at <peer_ip>, local at <local_ip>) removed, tunnel ID <tunnel_id>, call ID <call_id>.

Retry time-out interval expired. L2TP tunnel removed (peer at <peer_ip>, local at <local_ip>), tunnel ID <tunnel_id>.


Logging
----------------------------------------


Warning (00002)

Cannot connect to e-mail server <server_name>.

Mail recipients were not configured.

Mail server is not configured.

Unexpected error from e-mail server(state=<state>): <error>.


Notification (00002)

E-mail address 1 has been changed.

E-mail address 2 has been changed.

E-mail notification has been disabled.

E-mail notification has been enabled.

Inclusion of traffic logs with e-mail notification of event alarms has been disabled.

Inclusion of traffic logs with e-mail notification of event alarms has been enabled.

Mail server domain name has been changed.

Mail server IP address has been changed.


MGCP
----------------------------------------


Alert (00063)

MGCP ALG configured to drop unidentified message in NAT mode.

MGCP ALG configured to drop unidentified message in route mode.

MGCP ALG configured to pass unidentified message in NAT mode.

MGCP ALG configured to pass unidentified message in route mode.

MGCP ALG configured to screen high connection rate.

MGCP ALG connection flood rate threshold set to default.

MGCP ALG connection flood rate threshold value set to <num_of_connections_per_second> connections per second.

MGCP ALG disabled on the device.

MGCP ALG enabled on the device.

MGCP ALG inactive media timeout value set to default.

MGCP ALG inactive media timeout value set to <inactive_media_timeout> seconds.

MGCP ALG maximum call duration value set to default.

MGCP ALG maximum call duration value set to <max_call_duration> minutes.

MGCP ALG message flood rate threshold value set to default.

MGCP ALG message flood rate threshold value set to <num_of_messages_per_second> messages per second.

MGCP ALG removed the check for message flood rate.

MGCP ALG transaction timeout value set to default.

MGCP ALG transaction timeout value set to <transaction_timeout> seconds.

The MGCP ALG is configured to screen high message rate.

The MGCP ALG removed the check for connection rate.


Alert (00084)

The device cannot delete MGCP CA Port.

The device cannot delete MGCP UA ALG Port.

The device cannot initialize memory for MGCP.

The device cannot register MGCP CA Port.

The device cannot register MGCP UA Port.

The device cannot unregister MGCP ALG handler.


Notification (00084)

Device failure handling MGCP call because the number of calls exceeded the system limit.

The device cannot register the MGCP ALG request to RM.

The device cannot register the Network Address Translation vector for the MGCP ALG request.

The device does not have MGCP ALG client id with RM.

The device failed in unregistering MGCP client with RM.


Multicast
----------------------------------------


Alert (00601)

Error in initializing multicast.

Failure in initializing multicast data handler task.

Failure in initializing multicast route task.

Failure in registering for multicast data packet.

Failure in shutting down multicast route task.

System-wide multicast cachemiss node limit reached, <number-of-cachemiss-add_failed-from-last-exceed> nodes not added since limit exceeded.


Critical (00601)

Failure adding output interface to multicast route list due to exceeding system max. <number-of-output-interface-add_failed-from-last-exceed> interfaces not added since limit exceeded.

<vrouter-name>: virtual router multicast route limit exceeded, mroute addition failed.

<vrouter-name>: virtual router multicast route maximum, routes not added since limit exceeded - <number-of-mroute-add_failed-from-last-exceed>.

System wide multicast route limit exceeded, mroute add failed.

System wide multicast route limit reached, routes not added since limit exceeded - <number-of-mroute-add_failed-from-last-exceed>.


Notification (00056)

<string>.

<string>.


Notification (00057)

<vrouter-name>: maximum multicast routes limit configured to <maximum-mroutes>.

<vrouter-name>: maximum multicast routes limit removed.

<vrouter-name>: multicast negative cache routes feature configured.

<vrouter-name>: multicast negative cache routes feature removed.

<vrouter-name>: multicast negative cache routes timer configured to default.

<vrouter-name>: multicast negative cache routes timer configured to <negative-cache-timer-in-seconds> seconds.

<vrouter-name>: static multicast route src=<source-ip-address>, grp=<group-ip-address> ifp = <incoming-interface-name> deleted.

<vrouter-name>: static multicast route src=<source-ip-address>, grp=<group-ip-address> input ifp = <incoming-interface-name> output ifp = <outgoing-interface-name> added.


NSM
----------------------------------------


Notification (00033)

CA certificate field of NACN policy manager <integer> has been set to <string>.

CA certificate field of NACN policy manager <integer> has been unset.

Cert-Subject field of NACN policy manager <integer> has been set to <string>.

Cert-Subject field of NACN policy manager <integer> has been unset.

Host field of NACN policy manager <integer> has been set to <string>.

Host field of NACN policy manager <integer> has been unset.

NSM Device ID was set to <string>.

NSM Device ID was unset.

NSM installer name (<string>) and password were set.

NSM installer name and password were unset.

NSM keys were deleted.

NSM one-time-password was set.

NSM one-time-password was unset.

NSM primary server with name <string> was set: addr <IP address>, port <integer><string>

NSM primary server with name <string> was unset.

NSM secondary server with name <string> was set: addr <IP address>, port <integer><string>

NSM secondary server with name <string> was unset.

Outgoing interface of NACN policy manager <integer> has been set to <string>.

Outgoing interface of NACN policy manager <integer> has been unset.

Password field of NACN policy manager <integer> has been <string>.

Policy-domain field of NACN policy manager <integer> has been set to <string>.

Policy-domain field of NACN policy manager <integer> has been unset.

Port field of NACN policy manager <integer> has been reset to the default value.

Port field of NACN policy manager <integer> has been set to <integer>.

Reporting of attack alarms to <string> has been disabled.

Reporting of attack alarms to <string> has been enabled.

Reporting of attack statistics table to <string> has been disabled.

Reporting of attack statistics table to <string> has been enabled.

Reporting of configuration logs to <string> has been disabled.

Reporting of configuration logs to <string> has been enabled.

Reporting of deep inspection alarms to <string> has been disabled

Reporting of deep inspection alarms to <string> has been enabled

Reporting of ethernet statistics table to <string> has been disabled.

Reporting of ethernet statistics table to <string> has been enabled.

Reporting of flow statistics table to <string> has been disabled.

Reporting of flow statistics table to <string> has been enabled.

Reporting of information logs to <string> has been disabled.

Reporting of information logs to <string> has been enabled.

Reporting of miscellaneous alarms to <string> has been disabled.

Reporting of miscellaneous alarms to <string> has been enabled.

Reporting of policy table to <string> has been disabled.

Reporting of policy table to <string> has been enabled.

Reporting of protocol distribution table to <string> has been disabled.

Reporting of protocol distribution table to <string> has been enabled.

Reporting of self management logs to <string> has been disabled.

Reporting of self management logs to <string> has been enabled.

Reporting of traffic alarms to <string> has been disabled.

Reporting of traffic alarms to <string> has been enabled.

Reporting of traffic logs to <string> has been disabled.

Reporting of traffic logs to <string> has been enabled.

<string> has been disabled.

<string> has been enabled.

<string> <string> host has been disabled.

<string> <string> host has been set to <IP address>.

<string> <string> host has been set to <string>.

<string> VPN management tunnel has been disabled.

<string> VPN management tunnel has been enabled.

The NACN protocol has been <string>

Timeout value of <string> has been set to <integer> seconds.

Timeout value of <string> has been set to <integer> seconds (default)

User-defined service <string> has been added to <string> protocol distribution.

User-defined service <string> has been removed from <string> protocol distribution.


Information (00538)

Connection to <string> data collector at <IP address> has timed out.

Device is not known to <string> data collector at <IP address>.

Lost socket connection to <string> data collector at <IP address>.

NACN failed to register to policy manager <string> because of <string>.

NACN successfully registered to policy manager <string>: <string>.

NSM: Cannot connect to NSM server at <IP address>. Reason: <integer>, <string> (<integer> connect attempt(s))

NSM: Connected to NSM server at <IP address> (<integer> connect attempt(s))

NSM: Connection to NSM server at <IP address> is down. Reason: <integer>, <string>

NSM: Sent <string> message

NSM request may fail due to low memory (malloc failed)

The NACN protocol has started for policy manager <integer> on hostname <string> IP address <IP address> port <integer>


NSRD
----------------------------------------


Error (00551)

Error <integer> occurred during configlet file processing.


Warning (00551)

Configlet file authentication failed.

Configlet file decryption failed.

Error <integer> occurred, causing failure to establish secure management with Management System.


Information (00551)

Rapid Deployment cannot start because gateway has undergone configuration changes.

Secure management established successfully with remote server.


NTP
----------------------------------------


Notification (00531)

Administrator <admin_name> changed the Network Time Protocol authentication mode to <auth_mode> (<config_changer>)

Administrator <admin_name> changed the Network Time Protocol maximum adjustment value from <old_adj> to <new_adj> seconds (<config_changer>)

An acceptable time could not be obtained from <ntp_server_type> NTP server <ntp_server_name>

An administrator aborted the NTP time update.

An error occurred in setting the system clock.

Authentication failed for Network Time Protocol server <ntp_server_type> <ntp_server_name> because <fail_reason>

Network Time Protocol adjustment of <msec_adjustment> ms from NTP server <ntp_server_name> exceeds the allowed adjustment of <msec_adjustment_allowed> ms.

Network Time Protocol settings changed.

No acceptable time could be obtained from any NTP server.

No NTP server could be contacted.

NTP request cannot be sent. No key found for server <ntp_server_type> <ntp_server_name>

NTP request cannot be sent. No key id found for Network Time Protocol server <ntp_server_type> <ntp_server_name>

<ntp_server_type> NTP server <ntp_server_name> could not be contacted.

The system clock was updated from <ntp_server_type> NTP server type <ntp_server_name> with an adjustment of <msec_adjustment> ms. Authentication was <auth_mode>. Update mode was <update_mode>


Notification (00548)

The NetScreen device is attempting to contact the primary backup NTP server <ntp_server_name>

The NetScreen device is attempting to contact the primary NTP server <ntp_server_name>

The NetScreen device is attempting to contact the secondary backup NTP server <ntp_server_name>


OSPF
----------------------------------------


Critical (00206)

LSA flood in OSPF with router ID <self-router-id> on interface <interface-name> forced the interface to drop a packet.

LSA ID <lsa-id>, router ID <lsa-advertisig-router-id>, type <lsa-type> cannot be deleted from the real-time database in area <lsa-area-id>

OSPF instance with router ID <self-router-id> received a Hello packet flood from neighbor (IP address <neighbor-ip-address>, router ID <neighbor-router-id>) on interface <interface-name> forcing the interface to drop the packet.

Reject second OSPF neighbor (<neighbor-ip>) on interface (<interface name>) since it's configured as point-to-point interface

The total number of redistributed routes into OSPF in vrouter (<vrouter-name>) exceeded system limit (<system-limit>)


Notification (00038)

OSPF virtual routing instance in virtual router <vrouter_name> created.

OSPF virtual routing instance in virtual router <vrouter_name> deleted.

<configuration_command>

<set_or_unset> virtual router <vrouter_name> with the configuration command <configuration_command>

<set_or_unset> virtual router <vrouter_name> with the OSPF protocol <configuration_command>


Information (00541)

Killing of OSPF neighbor <neighbor ip address> delayed by <delay in seconds to trigger nbr dead event> seconds, last hello packet received time <sys_up_sec when flow level last received hello packet> ms and last processed hello packet occuring at <sys_up_sec when task level last received hello packet> ms.

LSA in following area aged out: LSA area ID <lsa-area-id>, LSA ID <lsa-id>, router ID <advertising router id>, type <lsa type> in OSPF.

Neighbor router ID - <neighbor-router-id> IP address - <neighbor-ip-address> changed its state to <neighbor-state>.

OSPF interface <ospf interface name> has become inactive, kill neighbor (IP address <neighbor ip address>, router ID <neighbor router-id>) on this interface.

OSPF neighbor <neighbor ip address> timeout, with last hello packet received at time <sys_up_sec when flow level last received hello packet> ms, and last processed hello packet occurring at time <sys_up_sec when task level last received hello packet> ms, current elapsed time in seconds <current elapsed time in seconds >.

OSPF packet retransmit counter exceeds limit, killing neighbor (IP address <neighbor ip address>, router ID <neighbor router-id>).

The system killed OSPF neighbor because of elapsed Hello time <time elapsed in seconds since we last received hello from this neighbor> sec (neighbor router ID <neighbor router id>, IP address <neighbor ip address>).

The system killed OSPF neighbor because the current router could not see itself in the hello packet. Neighbor changed state from <neighbor-old-state> to Init state, (neighbor router-id <neighbor-router-id>, ip-address <neighbor-ip-address>).


PIM
----------------------------------------


Alert (00602)

PIMSM Error in initializing access-list change handler.

PIMSM Error in initializing drp vsi elect change handler

PIMSM Error in initializing interface delete handler

PIMSM Error in initializing interface state change

PIMSM Error in initializing IP change handler

PIMSM Error in initializing MCAST policy change handler.

PIMSM Error in initializing nsrp state change handler.

PIMSM Error in initializing packet copy handler

PIMSM Error in initializing vrouter delete handler

PIMSM Error in initializing zone delete handler


Notification (00058)

PIMSM interface <interface-name>'s Hello Interval set to <join-prune-interval> seconds

PIMSM interface <interface-name> accept neighbors access list <acl-id> configured

PIMSM interface <interface-name> BSR border removed.

PIMSM interface <interface-name> configured as boot-strap border

PIMSM interface <interface-name> DR priority set to <dr-priority>

PIMSM interface <interface-name> hello holdtime set to <hello-hold-time> seconds

PIMSM interface <interface-name> Join-Prune Interval set to <join-prune-interval> seconds

PIMSM interface <interface-name> neighbor access list removed.

PIMSM protocol configured in vrouter <vrouter-name>

PIMSM protocol configured on interface <interface-name>

PIMSM protocol disabled in vrouter <vrouter-name>

PIMSM protocol disabled on interface <interface-name>

PIMSM protocol enabled in vrouter <vrouter-name>

PIMSM protocol enabled on interface <interface-name>

PIMSM protocol removed from vrouter <vrouter-name>

PIMSM protocol unconfigured on interface <interface-name>

Vrouter <vrouter-name> PIMSM multicast group access-list <multicast-group-ip-address-access-list> has been configured

Vrouter <vrouter-name> PIMSM multicast group access list removed

Vrouter <vrouter-name> PIMSM multicast group <multicast-group-ip-address> has been configured with RP access list <access-list>

Vrouter <vrouter-name> PIMSM multicast group <multicast-group-ip-address> has been configured with source access list <access-list>

Vrouter <vrouter-name> PIMSM Rendezvous point access list for multicast group <multicast-group-ip-address> removed

Vrouter <vrouter-name> PIMSM RP address <RP-ip-address> configured for multicast group access list <multicast-group-address-access-list> in zone <zone-name>

Vrouter <vrouter-name> PIMSM RP candidate on interface <RP-candidate-interface> configured for multicast group access list <multicast-group-address-access-list> in zone <zone-name> with priority <RP-candidate-priority> and holdtime <RP-candidate-hold-time>

Vrouter <vrouter-name> PIMSM RP Candidate removed from zone <zone-name>

Vrouter <vrouter-name> PIMSM RP <rp-ip-address> removed from zone <zone-name>

Vrouter <vrouter-name> PIMSM RP Proxy removed from zone <zone-name>

Vrouter <vrouter-name> PIMSM source access list for multicast group <multicast-group-ip-address> removed

Vrouter <vrouter-name> PIMSM SPT threshold set to infinity

Vrouter <vrouter-name> PIMSM SPT threshold set to <packets-per-second> packets per second

Vrouter <vrouter-name> PIMSM zone <zone-name> configured as RP Proxy.


Notification (00555)

Vrouter <vrouter-name> PIMSM cannot process non-multicast address <ip-address>


PKI
----------------------------------------


Notification (00535)

PKI: A configurable item (<item name>) has changed from (<old value>) to (<new value>).

PKI: A configurable item (<item name>) has changed from (<old setting>) to (<new setting>).

PKI: Adjusted key pair length from 0 to 1024 bits.

PKI: An incoming certificate is broken.

PKI: Auto-generated self-signed cert was deleted.

PKI: Cannot access OCSP server to get revocation status for cert with subject name <certificate subject name>.

PKI: Cannot auto generate a self-signed cert.

PKI: Cannot build certificate chain for cert with subject name <certificate subject name>.

PKI: Cannot compose HTTP packet to send to URL <url string>.

PKI: Cannot connect to LDAP server <peer host name>:<peer port> through <local outgoing interface name>.

PKI: Cannot contact HTTP server at URL <url string>.

PKI: Cannot create a socket to URL <url string>.

PKI: Cannot decode CRL data.

PKI: Cannot decrypt public key of cert with subject name <certificate subject name>.

PKI: Cannot delete the key-pair object for cert with subject name <subject name>.

PKI: Cannot extract SCEP SUCCESS response. Error: <error reason>, for cert request with subject name <cert subject name>.

PKI: Cannot generate cert request. Reason: <reason of failure> (subject name <subject name>).

PKI: Cannot generate PKCS #10 file for certificate request.

PKI: Cannot generate SCEP data. Cmd: <command>, error: <error reason>, for cert request with subject name <cert subject name>.

PKI: Cannot generate <key type string> key pair with subject name <subject name>.

PKI: Cannot initiate SCEP request with subject name <cert subject name>.

PKI: Cannot load CRL for cert with subject name <certificate subject name>.

PKI: Cannot load item from flash. Reason: <reason string>, type: <type object>, DN: <distinguished name>.

PKI: Cannot load <file type> file.

PKI: Cannot locate config for CA with ID <id number of CA certificate>.

PKI: Cannot locate key pair with ID <key id number> for SCEP.

PKI: Cannot locate the key-pair object for cert with subject name <subject name>.

PKI: Cannot retrieve the <type of object> with subject name <subject name>.

PKI: Cannot return to the original certificate chain. Cookies: (<certificate chain identifier>x)(<certificate chain identifier>x)(<certificate chain identifier>x)(<certificate chain identifier>x).

PKI: Cannot save CA config (CA cert subject name <CA certificate subject name>).

PKI: Cannot save CA configuration (CA cert subject name <CA certificate subject name>).

PKI: Cannot save new item to flash. Max: (<max size allowed for flash>), item: (<got size to be saved to flash>).

PKI: Cannot save the key-pair object for cert with subject name <subject name>.

PKI: Cannot save the <object type name> with subject name <subject name>.

PKI: Cannot send HTTP packet through socket to URL <url string>.

PKI: Cannot send PKCS #10 cert request to e-mail address <email address>.

PKI: Cannot store config for CA with cert subject name <CA certificate subject name>.

PKI: Cannot sync data to NSRP peer. (command <command>).

PKI: Cannot sync <name of the object> to NSRP peer. (command <command>).

PKI: Cannot verify cert for ScreenOS image authentication.

PKI: Cannot verify OCSP responder cert with subject name <certificate subject name>.

PKI: Cannot verify signature on OCSP response for cert with subject name <certificate subject name>.

PKI: Cannot wrap SCEP request. Error: <error reason>, for cert request with subject name <cert subject name>.

PKI: Cert has expired (subject name <certificate subject name>).

PKI: Certificate chain is too long for cert with subject name <certificate subject name>.

PKI: Certificate has been revoked (subject name <certificate subject name>).

PKI: Cert is not yet valid (subject name <certificate subject name>).

PKI: Cert requested already exists for subject name <cert subject name>.

PKI: Completed NSRP cold start sync after <number of attempts> attempts.

PKI: Completed SCEP cert request.

PKI: CRL cannot be saved to flash, issuer (<issuer subject name>).

PKI: CRL has a bad timestamp. (CA <issuer subject name>).

PKI: CRL has bad signature for cert with subject name <certificate subject name>.

PKI: CRL has expired. (CA <issuer subject name>).

PKI: CRL has expired for cert with subject name <certificate subject name>.

PKI: CRL is not issued by the CA that signed the cert with subject name <certificate subject name>.

PKI: CRL is not yet valid for cert with subject name <certificate subject name>.

PKI: CRL is too big (<size of CRL>) to load. Max: <max size allowed for flash>, CA: <issuer subject name>.

PKI: CRL is too big (<size of CRL>) to save to flash. Max: <max size allowed for flash>, CA: <issuer subject name>.

PKI: CRL server closed LDAP socket when verifying cert with subject name <certificate subject name>.

PKI: CRL will be refreshed as configured on the interupdate refresh setting. (CA <issuer subject name>).

PKI: Failed to obtain CRL for CA issuing cert with subject name <certificate subject name>.

PKI: Failed to obtain object ID (<object id number>x)(<object id number>).

PKI: Format error in CRL lastUpdate field for cert with subject name <certificate subject name>.

PKI: Format error in CRL nextUpdate field for cert with subject name <certificate subject name>.

PKI: Format error in the notAfter field of cert with subject name <certificate subject name>.

PKI: Format error in the notBefore field of cert with subject name <certificate subject name>.

PKI: Incorrect fingerprint for CA cert with subject name <CA cert subject name>.

PKI: Internal configuration error. Cannot verify cert with subject name <certificate subject name>.

PKI: Invalid certificate (subject name <certificate subject name>).

PKI: item in flash file incorrect, type(%8x) len(<integer>).

PKI: LDAP bind operation timed out for cert with subject name <certificate subject name>.

PKI: LDAP cannot search for DN (<Distinguished name>) using filter (<filter>).

PKI: LDAP modify add is not supported.

PKI: LDAP modify delete is not supported.

PKI: LDAP operation timed out for cert with subject name <certificate subject name>.

PKI: Loaded a flash file with PKI data in an earlier format (version 0).

PKI: No response for status inquiry for cert with subject name <certificate subject name>.

PKI: No revocation check, per config, for cert with subject name <certificate subject name>.

PKI: NSRP cold start sync. Received item <number of currently received item> before first item.

PKI: NSRP cold start sync. Received item <number of currently received item> out of order, expecting <number of expected item> of <number of total items in this session>.

PKI: NSRP cold start sync attempt <current attempt> failed.

PKI: NSRP cold start sync failed.

PKI: NSRP cold start sync for <number of items in this cold start sync session> items.

PKI: NSRP cold start sync session cannot locate item <index number of an item>.

PKI: NSRP cold start sync session interrupted by normal sync item.

PKI: Number of PKI objects exceeds storage maximum (<maxinum number of item is storage>).

PKI: OCSP response was inconclusive for cert with subject name <certificate subject name>.

PKI: Out of memory. Cannot process cert with subject name <certificate subject name>.

PKI: Per config, accepted cert even though CRL has a bad signature. (subject name <certificate subject name>).

PKI: Per config, accepted cert even though revocation check was inconclusive (subject name <certificate subject name>).

PKI: PKI objects exceeded maxinum capacity (<maxinum number of item list>).

PKI: PKI storage file is empty.

PKI: Received a SCEP FAILURE message for cert request with subject name <cert subject name>.

PKI: Received a self-signed cert in a certificate chain for cert with subject name <certificate subject name>.

PKI: Received a self-signed cert with subject name <certificate subject name>.

PKI: Received bad LDAP response for cert with subject name <certificate subject name>.

PKI: Received CA cert with bad fingerprint (CA cert subject name <CA cert subject name>).

PKI: Renewing cert through SCEP (subject name <string>).

PKI: request NSRP cold start sync at <number of attempts> seconds.

PKI: Saved CA config (CA cert subject name <CA certificate subject name>).

PKI: Saved CA configuration (CA cert subject name <CA certificate subject name>).

PKI: Saved PKI objects to flash.

PKI: Saved <object type name> with subject name <Distinguished Name>.

PKI: SCEP error: <string>, for cert with subject name <string>.

PKI: <object type string> has been deleted. (subject name <subject name>).

PKI: <object type string> has been deleted. (subject name <subject name>).

PKI: Successfully loaded image signer's public key.

PKI: System auto generated a self-signed cert.

PKI: Top cert of chain for peer's cert was wrong. Config required <required CA certificate subject name>, but derived <CA certificate subject name at top of the chain>.

PKI: Unable to authenticate cert with subject name <certificate subject name>.

PKI: Unable to decode issuer's public key for cert with subject name <certificate subject name>.

PKI: Unable to decrypt signature of cert with subject name <certificate subject name>.

PKI: Unable to decrypt signature of CRL for cert with subject name <certificate subject name>.

PKI: Unable to get issuer cert for cert with subject name <certificate subject name>.

PKI: Unable to get local issuer cert for cert with subject name <certificate subject name>.

PKI: Unable to verify first cert in a certificate chain (subject name <certificate subject name>).

PKI: Unable to verify the validity of cert with subject name <certificate subject name>.

PKI: Updated config for CA with ID <id number of CA certificate> from a global CA config.

PKI: Verified cert with subject name <certificate subject name>.


Policy
----------------------------------------


Notification (00018)

Default policy of the device has been changed to <policy_action_permit_or_deny> <config_changer>.

In policy <policy_id>, the application was modified to <application_name> <config_changer>.

In policy <policy_id>, the attack severity was modified <config_changer>.

In policy <policy_id>, the DI attack component was modified <config_changer>.

Policy (<policy_id>, global, <policy_src_name>-><policy_dst_name>,<policy_service_name>, <policy_action>) was added <config_changer>.

Policy (<policy_id>, <policy_from_zone>-><policy_to_zone>, <policy_src_name>-><policy_dst_name>,<policy_service_name>, <policy_action>) was deleted <config_changer>.

Policy (<policy_id>, <policy_from_zone>-><policy_to_zone>, <policy_src_name>-><policy_dst_name>,<policy_service_name>, <policy_action>) was modified <config_changer>.

Policy (<policy_id>, <policy_from_zone>-><policy_to_zone>, <policy_src_name>-><policy_dst_name>,<policy_service_name>, <policy_action>) was <policy_state_enabled_or_disabled> <config_changer>.

Policy (<policy_id>, <policy_from_zone>-><policy_to_zone>, <policy_src_name>-><policy_dst_name>,<policy_service_name>, <policy_nat> <policy_action>) was added <config_changer>.

Policy <src_policy_id> has been moved after <dst_policy_id> <admin_name>.

Policy <src_policy_id> has been moved before <dst_policy_id> <admin_name>.

<cell_name> <cell_obj_name> was <action_add_delete> policy ID <policy_id> <config_changer>.


PPP
----------------------------------------


Alert (00095)

No IP pool has been assigned. You cannot allocate an IP address.


Alert (00096)

Cannot allocate IP address from pool <ip_pool_name> for user <user_name>.


Notification (00017)

IP address pool <ip_pool_name> was removed <config_changer>.

IP address pool <ip_pool_name> with range <start_ip> - <end_ip> was created <config_changer>.

IP address pool <ip_pool_name> with range <start_ip> - <end_ip> was removed <config_changer>.

Range <start_ip> - <end_ip> was added to IP pool <ip_pool_name> <config_changer>.

Range <start_ip> - <end_ip> was removed from IP pool <ip_pool_name> <config_changer>.


Notification (00077)

PPP on <string> detects loopback.

PPP profile <string> changes authentication type to <string>.

PPP profile <string> changes local-name to <string>.

PPP profile <string> changes secret to <string>.

PPP profile <string> is <string>.

PPP profile <string> sets netmask <IP address>.

PPP profile <string> sets <string> use static IP.

PPP profile <string> <string> passive mode CHAP.

PPP <string> encapsulation <string> for interface <string>.

PPP set MRRU <integer> for interface <string>.

PPP <string> interface <string> <string> bundle <string>.

PPP <string> profile <string> for interface <string>.

PPP <string> short sequence number for interface <string>.


Notification (00088)

PPP control packet queue on <string> takes on <string> packets.


Notification (00572)

PPP authentication state on interface <string>: <string>.

PPP bundle <string> is <string> and then brings <string> bundle NCP.

PPP LCP on interface <string> is <string>.

PPP member <string> fails to join bundle <string> for <string>.

PPP member <string> joins bundle <string> successfully.

PPP on interface <string> finds possible loopback.

PPP on interface <string> is terminated by missing too many echo replies.

PPP on interface <string> is terminated by receiving Terminate-Request.

PPP on <string> resets LCP for <string>.

PPP protocol on interface <string> is <string>, local IP: <IP address>, peer IP: <IP address> .

PPP updates interface <string>'s IP to <IP address> .

PPP updates interface <string>'s L3 MTU to <integer>.


PPPoA
----------------------------------------


Notification (00060)

PPPoA is disabled on <interface_name> interface.

PPPoA is enabled on <interface_name> interface.


Notification (00558)

PPPoA <PPPoA name> connected successfully.

PPPoA <PPPoA name> connection attempt failed (<reason>).

PPPoA <PPPoA name> failed to modify the gateway for the interface.

PPPoA <PPPoA name> failed to modify the IP for the interface.

PPPoA <PPPoA name> failed to negotiate the IP for the interface.

PPPoA <PPPoA name> idle timeout.

PPPoA <PPPoA name> shutdown.

PPPoA <PPPoA name> started negotiation.


PPPoE
----------------------------------------


Notification (00034)

Point-to-Point Protocol over Ethernet (PPPoE) settings changed.

PPPoE is disabled on <interface_name> interface.

PPPoE is enabled on <interface_name> interface.


Notification (00537)

AC <url_string> is advertising URL <string>

Failed to set PPPoE interface gateway.

Failed to set PPPoE interface IP address.

Failed to set PPPoE IPv6 interface gateway.

Message from AC <access_concentrator>: <message_from_ac>

Point-to-Point Protocol over Ethernet (PPPoE) connection failed to establish a session. No IP address assigned.

Point-to-Point Protocol over Ethernet (PPPoE) connection failed to establish a session. No IPv6 address assigned.

Point-to-Point Protocol over Ethernet (PPPoE) connection failed to establish a session. <pppoe_packet_received_type> received.

Point-to-Point Protocol over Ethernet (PPPoE) connection failed to establish a session. Timeout <timeout_reason>

PPPoE session closed by AC.

PPPoE session shut down, PPPoE disabled.

PPPoE session shut down. Idle timeout.

PPPoE session shut down by user.

PPPoE session shuts down for <pppoe_instance_name> instance due to system reset.

PPPoE session started negotiations.

PPPoE session termination or failure during: <ppp_fail_reason>

PPPoE session was successfully established.


RIP
----------------------------------------


Critical (00207)

RIP database size limit exceeded for <vrouter_name>, RIP route dropped.

System wide RIP route limit exceeded, RIP route dropped.

The total number of redistributed routes into RIP in vrouter (<vrouter-name>) exceeded system limit (<system-limit>).

<route_drop_count> RIP routes dropped, RIP database size exceeded in vr <vrouter_name>.

<route-drop-count> RIP routes dropped, system wide RIP route limit exceeded.


Critical (00227)

RIPng database size limit exceeded for <vrouter_name>, RIPng route dropped.

System wide RIPng route limit exceeded, RIPng route dropped.

The total number of redistributed routes into RIPng in vrouter (<vrouter-name>) exceeded system limit (<system-limit>).

<route_drop_count> RIPng routes dropped, RIP database size exceeded in vr <vrouter_name>.

<route-drop-count> RIPng routes dropped, system wide RIPng route limit exceeded.

Virtual router <vrouter_name> that received an update packet flood from neighbor <neighbor-ip-address> on interface <interface-name> dropped a packet.

Virtual router <vrouter_name> that received an update packet flood from neighbor <neighbor-ip-address> on interface <interface-name> dropped a packet.


Notification (00045)

RIP instance in virtual router <vrouter_name> was created.

RIP instance in virtual router <vrouter_name> was removed.

<configuration_command>

<set_or_unset> virtual router <vrouter_name> with the configuration command <configuration_command>.

<set_or_unset> vrouter <vrouter_name> protocol RIP received configuration command <configuration_command>.


Notification (00073)

RIPng instance in virtual router <vrouter_name> created.

RIPng instance in virtual router <vrouter_name> removed.

<configuration_command>

<set_or_unset> virtual router <vrouter_name> with the configuration command <configuration_command>.

<set_or_unset> vrouter <vrouter_name> protocol RIP received configuration command <configuration_command>.


Information (00544)

RIP neighbor <neighbor-ip-address> in virtual router <vrouter_name> added.

RIP neighbor <neighbor-ip-address> in virtual router <vrouter_name> removed.


Information (00562)

RIPng neighbor <neighbor-ip-address> in virtual router <vrouter_name> added.

RIPng neighbor <neighbor-ip-address> in virtual router <vrouter_name> removed.


Route
----------------------------------------


Critical (00229)

Error in rebuilding the PBR policy lookup tree for <pbr_policy_name> in virtual router <vrouter_name>.

Unable to add PBR policy <pbr_policy_name> in virtual router <vrouter_name>. Exceeded maximum number of policies (<max_pbr_pol_num>).


Notification (00048)

access list <access-list-id> sequence number <access-list-sequence-num> default-route with action <permit_or_deny> is created in vrouter <vrouter-name>

Access list entry <access-list-id> was removed from virtual router <vrouter-name>

Access list entry <access-list-id> was removed from virtual router <vrouter-name>

Access list entry <access-list-id> with a sequence number <access-list-sequence-num> that <permit_or_deny> IP address <ip_address>/<ip_mask> is being deleted from virtual router <vrouter-name>

Access list entry <access-list-id> with sequence number <access-list-sequence-num> with an action of <permit_or_deny> with an IP address and subnetwork mask of <ip_address>/<ip_mask> was created on virtual router <vrouter-name>

An <import_or_export_rule> rule applied to a connection between virtual router <source-vrouter-name> and virtual router <destination-vrouter-name> with IP prefix <ip_address>/<ip_mask> was <created_or_deleted>

An <import_or_export_rule> rule in virtual router <source-vrouter-name> to virtual router <destination-vrouter-name> with route map <route-map-name> and protocol <protocol-name> was <created_or_deleted>

Ipv6 access list <access-list-id> created in vrouter <vrouter-name>

Ipv6 access list <access-list-id> sequence number <access-list-sequence-num> <permit_or_deny> ip <ip_address>/<ip_mask> created in vrouter <vrouter-name>

IPv6 access list <access-list-id> sequence number <access-list-sequence-num> <permit_or_deny> ip <ip_address>/<ip_mask> is being deleted in vrouter <vrouter-name>

Route entry with sequence number <route-map-sequence-number> in route map <route-map-name>, virtual router <vrouter-name> was removed.

Route map entry with sequence number <route-map-sequence-number> in route map <route-map-name> in virtual router <vrouter-name> was created.

Route map <route-map-name> in virtual router <vrouter-name> was removed.

<configuration_command>


Notification (00080)

PBR policy <pbr_policy_name> added to virtual router <vrouter_name>. Total policies in vr: <num_pbr_pol_in_vrouter>.

PBR policy <pbr_policy_name> deleted from virtual router <vrouter_name>. Total policies in vr: <num_pbr_pol_in_vrouter>.


Notification (00615)

PBR policy <pbr_policy_name> lookup tree rebuilt successfully in virtual router <vrouter_name>.

PBR policy <pbr_policy_name> rebuilding lookup tree for virtual router <vrouter_name>.


SCCP
----------------------------------------


Alert (00062)

SCCP ALG call flood rate threshold set to default of <calls-per-minute> per minute.

SCCP ALG call flood rate threshold set to <calls-per-minute> calls per minute.

SCCP ALG disabled on the device.

SCCP ALG enabled on the device.

SCCP ALG inactive media timeout configured to default <inactive-media-timeout> seconds.

SCCP ALG inactive media timeout configured to <inactive-media-timeout> seconds.

SCCP ALG protection against call flood is disabled.

SCCP ALG protection against call flood is enabled.

SCCP ALG registered line break to <type-of-line-break-proxy-or-rsm>.

SCCP ALG will drop the unknown messages in NAT mode.

SCCP ALG will drop the unknown messages in route mode.

SCCP ALG will not drop the unknown messages in NAT mode.

SCCP ALG will not drop the unknown messages in route mode.


Alert (00083)

SCCP ALG maximum call environment value (<sccp_max_call_env_value>) invalid, maximum call number set to <sccp_max_call_value_set>.

SCCP call from <client-ip-address> dropped due to out-bound call rate exceed from that client.