Dell SonicWALL™ SonicOSLog Events Reference Guide5.9/6.0.5/6.2

Copyright 2016 Dell Inc. All rights reserved.

This product is protected by U.S. and international copyright and intellectual property laws. Dell™, the Dell logo, and SonicWALL are trademarks of Dell Inc. in the United States and/or other jurisdictions. All other marks and names mentioned herein may be trademarks of their respective companies.

SonicOS Log Events Reference GuideUpdated - May 2016Software Version - 5.9/6.0.5/6.2232-002657-00 RevB

Legend

CAUTION: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed.

WARNING: A WARNING icon indicates a potential for property damage, personal injury, or death.

IMPORTANT NOTE, NOTE, TIP, MOBILE, or VIDEO: An information icon indicates supporting information.

Contents

Dell SonicWALL SonicOS 5.9/6.0.5/6.2Log Events Reference Guide

3

Introduction to SonicOS log events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

Log > Monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

Log > Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Index of Log Event Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Syslog events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .142

Log > Syslog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142

Index of Syslog tag field descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143

Examples of standard Syslog messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148

Examples of ArcSight Syslog messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148

Legacy categories . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149

Expanded categories . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150

Priority levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153

About Dell . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .154

Contacting Dell . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154

Technical support resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154

1

Introduction to SonicOS log events

This reference guide lists and describes the SonicOS log event messages for SonicOS 5.9, 6.0.5, and 6.2. The Log Event Message Index table lists all events by event ID number. The Syslog Tags table lists and describes all available Syslog tags which contain additional information specific to the log event.

Topics:

• Log > Monitor on page 4

• Log > Settings on page 5

Log > MonitorThe Dell SonicWALL security appliance maintains an Event log for tracking potential security threats. This log can be viewed by navigating to the Dashboard > Log Monitor or Log > Log Monitor page, or it can be automatically sent to an email address for convenience and archiving. The log is displayed in a table and can be sorted by column.

For more information on configuring the Log Monitor page, refer to the SonicOS Administration Guide.

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 4

Log > SettingsThe Log > Settings page allows you to categorize and customize the logging functions on your Dell SonicWALL security appliance for troubleshooting and diagnostics.

For more information on configuring and managing the Log > Settings page, refer to the SonicOS Administration Guide.

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 5

2

Index of Log Event Messages

This section contains the Log Event Message Index, which is a list of log event messages for the SonicOS 5.9, 6.0.5, and 6.2 (up to 6.2.2) firmware.

Each log event message described in the table provides the following log event details:

• ID—Displays the ID number of the log event message.

• Firmware Version—Displays the SonicOS firmware version the log event message appears on.

• Legacy Category—Displays the category event type. This is the same category as Legacy categories on page 149.

• SonicOS Category—Displays the SonicOS category type. This is the same category as Expanded categories on page 150.

• Priority Level—Displays the level of urgency of the log event message. For additional information, you can also reference Priority levels on page 153.

• SNMP Trap Type—Displays the SNMP Trap ID number of the log even message.

• Log Event Message—Displays the name of the event message.

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 6

ce

ce

ce

E-mail

E-mail

E-mail

List;

List;

List;

il;

il;

il;

d

d

d

ccess

Table 1. Log Event Message Index

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

4 5.9.0 Maintenance Firewall Event ALERT --- Network Security Applianactivated

4 6.0.5 Maintenance Firewall Event ALERT --- Network Security Applianactivated

4 6.2.0 Maintenance Firewall Event ALERT --- Network Security Applianactivated

5 5.9.0 Maintenance Firewall Logging INFO --- Log Cleared

5 6.0.5 Maintenance Firewall Logging INFO --- Log Cleared

5 6.2.0 Maintenance Firewall Logging INFO --- Log Cleared

6 5.9.0 Maintenance Firewall Logging INFO --- Log successfully sent via

6 6.0.5 Maintenance Firewall Logging INFO --- Log successfully sent via

6 6.2.0 Maintenance Firewall Logging INFO --- Log successfully sent via

10 5.9.0 System Error Security Services ERROR 602 Problem loading the URLcheck Filter settings

10 6.0.5 System Error Security Services ERROR 602 Problem loading the URLcheck Filter settings

10 6.2.0 System Error Security Services ERROR 602 Problem loading the URLcheck Filter settings

12 5.9.0 System Error Firewall Logging WARNING 604 Problem sending log E-macheck log settings

12 6.0.5 System Error Firewall Logging WARNING 604 Problem sending log E-macheck log settings

12 6.2.0 System Error Firewall Logging WARNING 604 Problem sending log E-macheck log settings

14 5.9.0 Blocked Sites Network Access ERROR 701 Web site access denied

14 6.0.5 Blocked Sites Network Access ERROR 701 Web site access denied

14 6.2.0 Blocked Sites Network Access ERROR 701 Web site access denied

15 5.9.0 Blocked Sites Network Access NOTICE 702 Newsgroup access denied

15 6.0.5 Blocked Sites Network Access NOTICE 702 Newsgroup access denied

15 6.2.0 Blocked Sites Network Access NOTICE 702 Newsgroup access denied

16 5.9.0 Blocked Sites Network Access NOTICE 703 Web site access allowed

16 6.0.5 Blocked Sites Network Access NOTICE 703 Web site access allowed

16 6.2.0 Blocked Sites Network Access NOTICE 703 Web site access allowed

17 5.9.0 Blocked Sites Network Access NOTICE 704 Newsgroup access allowe

17 6.0.5 Blocked Sites Network Access NOTICE 704 Newsgroup access allowe

17 6.2.0 Blocked Sites Network Access NOTICE 704 Newsgroup access allowe

18 5.9.0 Blocked Code Network Access NOTICE --- ActiveX access denied

18 6.0.5 Blocked Code Network Access NOTICE --- ActiveX access denied

18 6.2.0 Blocked Code Network Access NOTICE --- ActiveX access denied

19 5.9.0 Blocked Code Network Access NOTICE --- Java access denied

19 6.0.5 Blocked Code Network Access NOTICE --- Java access denied

19 6.2.0 Blocked Code Network Access NOTICE --- Java access denied

20 5.9.0 Blocked Code Network Access NOTICE --- ActiveX or Java archive adenied

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 7

ccess

ccess

ed

ed

ed

ed

20 6.0.5 Blocked Code Network Access NOTICE --- ActiveX or Java archive adenied

20 6.2.0 Blocked Code Network Access NOTICE --- ActiveX or Java archive adenied

21 5.9.0 Blocked Code Network Access NOTICE --- Cookie removed

21 6.0.5 Blocked Code Network Access NOTICE --- Cookie removed

21 6.2.0 Blocked Code Network Access NOTICE --- Cookie removed

22 5.9.0 Attack Intrusion Detection

ALERT 501 Ping of death dropped

22 6.0.5 Attack Intrusion Detection

ALERT 501 Ping of death dropped

22 6.2.0 Attack Intrusion Detection

ALERT 501 Ping of death dropped

23 5.9.0 Attack Intrusion Detection

ALERT 502 IP spoof dropped

23 6.0.5 Attack Intrusion Detection

ALERT 502 IP spoof dropped

23 6.2.0 Attack Intrusion Detection

ALERT 502 IP spoof dropped

24 5.9.0 User Activity Authenticated Access

INFO --- User logged out - user disconnect detected

24 6.0.5 User Activity Authenticated Access

INFO --- User logged out - user disconnect detected

24 6.2.0 User Activity Authenticated Access

INFO --- User logged out - user disconnect detected

25 5.9.0 Attack Intrusion Detection

WARNING 503 Possible SYN flood attackdetected

25 6.0.5 Attack Intrusion Detection

WARNING 503 Possible SYN flood attackdetected

25 6.2.0 Attack Intrusion Detection

WARNING 503 Possible SYN flood attackdetected

27 5.9.0 Attack Intrusion Detection

ALERT 505 Land attack dropped

27 6.0.5 Attack Intrusion Detection

ALERT 505 Land attack dropped

27 6.2.0 Attack Intrusion Detection

ALERT 505 Land attack dropped

28 5.9.0 TCP | UDP | ICMP

Network NOTICE --- Fragmented packet dropp

28 6.0.5 TCP | UDP | ICMP

Network NOTICE --- Fragmented packet dropp

28 6.2.0 TCP | UDP | ICMP

Network NOTICE --- Fragmented packet dropp

29 5.9.0 User Activity Authenticated Access

INFO --- Administrator login allow

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 8

ed

ed

d due

d due

d due

al zone

al zone

al zone

bad

bad

bad

bad

bad

bad

d from his

d from his

d from his

29 6.0.5 User Activity Authenticated Access

INFO --- Administrator login allow

29 6.2.0 User Activity Authenticated Access

INFO --- Administrator login allow

30 5.9.0 Attack Authenticated Access

ALERT 560 Administrator login denieto bad credentials

30 6.0.5 Attack Authenticated Access

ALERT 560 Administrator login denieto bad credentials

30 6.2.0 Attack Authenticated Access

ALERT 560 Administrator login denieto bad credentials

31 5.9.0 User Activity Authenticated Access

INFO --- User login from an internallowed

31 6.0.5 User Activity Authenticated Access

INFO --- User login from an internallowed

31 6.2.0 User Activity Authenticated Access

INFO --- User login from an internallowed

32 5.9.0 User Activity Authenticated Access

INFO --- User login denied due to credentials

32 6.0.5 User Activity Authenticated Access

INFO --- User login denied due to credentials

32 6.2.0 User Activity Authenticated Access

INFO --- User login denied due to credentials

33 5.9.0 User Activity Authenticated Access

INFO --- User login denied due to credentials

33 6.0.5 User Activity Authenticated Access

INFO --- User login denied due to credentials

33 6.2.0 User Activity Authenticated Access

INFO --- User login denied due to credentials

34 5.9.0 User Activity Authenticated Access

INFO --- Pending login timed out

34 6.0.5 User Activity Authenticated Access

INFO --- Pending login timed out

34 6.2.0 User Activity Authenticated Access

INFO --- Pending login timed out

35 5.9.0 Attack Authenticated Access

ALERT --- Administrator login denie%s; logins disabled from tinterface

35 6.0.5 Attack Authenticated Access

ALERT 506 Administrator login denie%s; logins disabled from tinterface

35 6.2.0 Attack Authenticated Access

ALERT 506 Administrator login denie%s; logins disabled from tinterface

36 5.9.0 TCP Network Access NOTICE --- TCP connection dropped

36 6.0.5 TCP Network Access NOTICE --- TCP connection dropped

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 9

to

to

to

d

d

d

t

t

t

d

d

d

acket

acket

acket

el

el

el

n e

n e

n e

ction ny IP our LAN

ction ny IP our LAN

36 6.2.0 TCP Network Access NOTICE --- TCP connection dropped

37 5.9.0 UDP Network Access NOTICE --- UDP packet dropped

37 6.0.5 UDP Network Access NOTICE --- UDP packet dropped

37 6.2.0 UDP Network Access NOTICE --- UDP packet dropped

38 5.9.0 ICMP Network Access NOTICE --- ICMP packet dropped duePolicy

38 6.0.5 ICMP Network Access NOTICE --- ICMP packet dropped duePolicy

38 6.2.0 ICMP Network Access NOTICE --- ICMP packet dropped duePolicy

41 5.9.0 Debug Network Access NOTICE --- Unknown protocol droppe

41 6.0.5 Debug Network Access NOTICE --- Unknown protocol droppe

41 6.2.0 Debug Network Access NOTICE --- Unknown protocol droppe

43 5.9.0 Debug Network Access DEBUG --- IPsec connection interrup

43 6.0.5 Debug Network Access DEBUG --- IPsec connection interrup

43 6.2.0 Debug Network Access DEBUG --- IPsec connection interrup

45 5.9.0 Debug Network DEBUG --- ARP Timeout

45 6.0.5 Debug Network DEBUG --- ARP Timeout

45 6.2.0 Debug Network DEBUG --- ARP Timeout

46 5.9.0 Debug Network Access DEBUG --- Broadcast packet droppe

46 6.0.5 Debug Network Access DEBUG --- Broadcast packet droppe

46 6.2.0 Debug Network Access DEBUG --- Broadcast packet droppe

48 5.9.0 Debug Network Access DEBUG --- Out-of-order command pdropped

48 6.0.5 Debug Network Access DEBUG --- Out-of-order command pdropped

48 6.2.0 Debug Network Access DEBUG --- Out-of-order command pdropped

49 5.9.0 Debug Unused DEBUG --- Failure to add data chann

49 6.0.5 Debug Unused DEBUG --- Failure to add data chann

49 6.2.0 Debug Unused DEBUG --- Failure to add data chann

53 5.9.0 System Error Firewall Event ERROR 607 The cache is full; %u opeconnections; some will bdropped

53 6.0.5 System Error Firewall Event ERROR 607 The cache is full; %u opeconnections; some will bdropped

53 6.2.0 System Error Firewall Event ERROR 607 The cache is full; %u opeconnections; some will bdropped

58 5.9.0 System Error Firewall Event ERROR 608 License exceeded: Connedropped because too maaddresses are in use on y

58 6.0.5 System Error Firewall Event ERROR 608 License exceeded: Connedropped because too maaddresses are in use on y

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 10

ction ny IP our LAN

nied

nied

nied

ket or

ket or

ket or

ed

ed

ed

ity

ity

ity

n

n

n

ck

ck

ck

ed

58 6.2.0 System Error Firewall Event ERROR 608 License exceeded: Connedropped because too maaddresses are in use on y

60 5.9.0 Blocked Sites Network Access NOTICE 705 Access to proxy server de

60 6.0.5 Blocked Sites Network Access NOTICE 705 Access to proxy server de

60 6.2.0 Blocked Sites Network Access NOTICE 705 Access to proxy server de

61 5.9.0 System Error VPN IPsec ERROR 609 Diagnostic Code E

61 6.0.5 System Error VPN IPsec ERROR 609 Diagnostic Code E

61 6.2.0 System Error VPN IPsec ERROR 609 Diagnostic Code E

63 5.9.0 Debug Network DEBUG --- Received fragmented pacfragmentation needed

63 6.0.5 Debug Network DEBUG --- Received fragmented pacfragmentation needed

63 6.2.0 Debug Network DEBUG --- Received fragmented pacfragmentation needed

65 5.9.0 User Activity VPN IPsec INFO --- Illegal IPsec SPI

65 6.0.5 User Activity VPN IPsec INFO --- Illegal IPsec SPI

65 6.2.0 User Activity VPN IPsec INFO --- Illegal IPsec SPI

67 5.9.0 Attack VPN IPsec ERROR 508 IPsec Authentication Fail

67 6.0.5 Attack VPN IPsec ERROR 508 IPsec Authentication Fail

67 6.2.0 Attack VPN IPsec ERROR 508 IPsec Authentication Fail

68 5.9.0 Attack VPN IPsec ERROR 509 IPsec Decryption Failed

68 6.0.5 Attack VPN IPsec ERROR 509 IPsec Decryption Failed

68 6.2.0 Attack VPN IPsec ERROR 509 IPsec Decryption Failed

69 5.9.0 User Activity VPN IPsec INFO --- Incompatible IPsec SecurAssociation

69 6.0.5 User Activity VPN IPsec INFO --- Incompatible IPsec SecurAssociation

69 6.2.0 User Activity VPN IPsec INFO --- Incompatible IPsec SecurAssociation

70 5.9.0 Attack VPN IPsec ERROR 510 IPsec packet from or to aillegal host

70 6.0.5 Attack VPN IPsec ERROR 510 IPsec packet from or to aillegal host

70 6.2.0 Attack VPN IPsec ERROR 510 IPsec packet from or to aillegal host

81 5.9.0 Attack Intrusion Detection

ALERT 520 Smurf Amplification attadropped

81 6.0.5 Attack Intrusion Detection

ALERT 520 Smurf Amplification attadropped

81 6.2.0 Attack Intrusion Detection

ALERT 520 Smurf Amplification attadropped

82 5.9.0 Attack Intrusion Detection

ALERT 521 Possible port scan detect

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 11

ed

ed

ted

ted

ted

IPsec

IPsec

IPsec

posal

posal

posal

. )

. )

. )

82 6.0.5 Attack Intrusion Detection

ALERT 521 Possible port scan detect

82 6.2.0 Attack Intrusion Detection

ALERT 521 Possible port scan detect

83 5.9.0 Attack Intrusion Detection

ALERT 522 Probable port scan detec

83 6.0.5 Attack Intrusion Detection

ALERT 522 Probable port scan detec

83 6.2.0 Attack Intrusion Detection

ALERT 522 Probable port scan detec

84 5.9.0 Maintenance Network INFO --- Failed to resolve name

84 6.0.5 Maintenance Network INFO --- Failed to resolve name

84 6.2.0 Maintenance Network INFO --- Failed to resolve name

87 5.9.0 User Activity VPN IKE INFO --- IKE Responder: Acceptingproposal (Phase 2)

87 6.0.5 User Activity VPN IKE INFO --- IKE Responder: Acceptingproposal (Phase 2)

87 6.2.0 User Activity VPN IKE INFO --- IKE Responder: Acceptingproposal (Phase 2)

88 5.9.0 User Activity VPN IKE WARNING 523 IKE Responder: IPsec prodoes not match (Phase 2)

88 6.0.5 User Activity VPN IKE WARNING 523 IKE Responder: IPsec prodoes not match (Phase 2)

88 6.2.0 User Activity VPN IKE WARNING 523 IKE Responder: IPsec prodoes not match (Phase 2)

89 5.9.0 User Activity VPN IKE INFO --- IKE negotiation completeAdding IPsec SA. (Phase 2

89 6.0.5 User Activity VPN IKE INFO --- IKE negotiation completeAdding IPsec SA. (Phase 2

89 6.2.0 User Activity VPN IKE INFO --- IKE negotiation completeAdding IPsec SA. (Phase 2

93 5.9.0 System Error Firewall Hardware ERROR 611 Diagnostic Code A

93 6.0.5 System Error Firewall Hardware ERROR 611 Diagnostic Code A

93 6.2.0 System Error Firewall Hardware ERROR 611 Diagnostic Code A

94 5.9.0 System Error Firewall Hardware ERROR 612 Diagnostic Code B

94 6.0.5 System Error Firewall Hardware ERROR 612 Diagnostic Code B

94 6.2.0 System Error Firewall Hardware ERROR 612 Diagnostic Code B

95 5.9.0 System Error Firewall Hardware ERROR 613 Diagnostic Code C

95 6.0.5 System Error Firewall Hardware ERROR 613 Diagnostic Code C

95 6.2.0 System Error Firewall Hardware ERROR 613 Diagnostic Code C

96 5.9.0 Maintenance GMS INFO --- Status

96 6.0.5 Maintenance GMS INFO --- Status

96 6.2.0 Maintenance GMS INFO --- Status

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 12

OVER.

OVER.

OVER.

uest

uest

uest

uest

uest

uest

uest

uest

uest

uest

uest

uest

uest

uest

uest

e. Did

97 5.9.0 Connection Traffic

Network Traffic INFO --- Web site hit

97 6.0.5 Connection Traffic

Network Traffic INFO --- Web site hit

97 6.2.0 Connection Traffic

Network Traffic INFO --- Web site hit

98 5.9.0 Connection Network Traffic INFO --- Connection Opened

98 6.0.5 Connection Network Traffic INFO --- Connection Opened

98 6.2.0 Connection Network Traffic INFO --- Connection Opened

99 5.9.0 Maintenance DHCP Client INFO --- Retransmitting DHCP DISC

99 6.0.5 Maintenance DHCP Client INFO --- Retransmitting DHCP DISC

99 6.2.0 Maintenance DHCP Client INFO --- Retransmitting DHCP DISC

100 5.9.0 Maintenance DHCP Client INFO --- Retransmitting DHCP Req(Requesting).

100 6.0.5 Maintenance DHCP Client INFO --- Retransmitting DHCP Req(Requesting).

100 6.2.0 Maintenance DHCP Client INFO --- Retransmitting DHCP Req(Requesting).

101 5.9.0 Maintenance DHCP Client INFO --- Retransmitting DHCP Req(Renewing).

101 6.0.5 Maintenance DHCP Client INFO --- Retransmitting DHCP Req(Renewing).

101 6.2.0 Maintenance DHCP Client INFO --- Retransmitting DHCP Req(Renewing).

102 5.9.0 Maintenance DHCP Client INFO --- Retransmitting DHCP Req(Rebinding).

102 6.0.5 Maintenance DHCP Client INFO --- Retransmitting DHCP Req(Rebinding).

102 6.2.0 Maintenance DHCP Client INFO --- Retransmitting DHCP Req(Rebinding).

103 5.9.0 Maintenance DHCP Client INFO --- Retransmitting DHCP Req(Rebooting).

103 6.0.5 Maintenance DHCP Client INFO --- Retransmitting DHCP Req(Rebooting).

103 6.2.0 Maintenance DHCP Client INFO --- Retransmitting DHCP Req(Rebooting).

104 5.9.0 Maintenance DHCP Client INFO --- Retransmitting DHCP Req(Verifying).

104 6.0.5 Maintenance DHCP Client INFO --- Retransmitting DHCP Req(Verifying).

104 6.2.0 Maintenance DHCP Client INFO --- Retransmitting DHCP Req(Verifying).

105 5.9.0 Maintenance DHCP Client INFO --- Sending DHCP DISCOVER.

105 6.0.5 Maintenance DHCP Client INFO --- Sending DHCP DISCOVER.

105 6.2.0 Maintenance DHCP Client INFO --- Sending DHCP DISCOVER.

106 5.9.0 Maintenance DHCP Client INFO --- DHCP Server not availablnot get any DHCP OFFER.

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 13

e. Did

e. Did

ng.

ng.

ng.

HCP

HCP

HCP

ddress

ddress

ddress

est e.

est e.

est e.

est .

est .

est .

106 6.0.5 Maintenance DHCP Client INFO --- DHCP Server not availablnot get any DHCP OFFER.

106 6.2.0 Maintenance DHCP Client INFO --- DHCP Server not availablnot get any DHCP OFFER.

107 5.9.0 Maintenance DHCP Client INFO --- Got DHCP OFFER. Selecti

107 6.0.5 Maintenance DHCP Client INFO --- Got DHCP OFFER. Selecti

107 6.2.0 Maintenance DHCP Client INFO --- Got DHCP OFFER. Selecti

108 5.9.0 Maintenance DHCP Client INFO --- Sending DHCP Request.

108 6.0.5 Maintenance DHCP Client INFO --- Sending DHCP Request.

108 6.2.0 Maintenance DHCP Client INFO --- Sending DHCP Request.

109 5.9.0 Maintenance DHCP Client INFO --- DHCP Client did not get DACK.

109 6.0.5 Maintenance DHCP Client INFO --- DHCP Client did not get DACK.

109 6.2.0 Maintenance DHCP Client INFO --- DHCP Client did not get DACK.

110 5.9.0 Maintenance DHCP Client INFO --- DHCP Client got NACK.

110 6.0.5 Maintenance DHCP Client INFO --- DHCP Client got NACK.

110 6.2.0 Maintenance DHCP Client INFO --- DHCP Client got NACK.

111 5.9.0 Maintenance DHCP Client INFO --- DHCP Client got ACK fromserver.

111 6.0.5 Maintenance DHCP Client INFO --- DHCP Client got ACK fromserver.

111 6.2.0 Maintenance DHCP Client INFO --- DHCP Client got ACK fromserver.

112 5.9.0 Maintenance DHCP Client INFO --- DHCP Client is declining aoffered by the server.

112 6.0.5 Maintenance DHCP Client INFO --- DHCP Client is declining aoffered by the server.

112 6.2.0 Maintenance DHCP Client INFO --- DHCP Client is declining aoffered by the server.

113 5.9.0 Maintenance DHCP Client INFO --- DHCP Client sending Requand going to REBIND stat

113 6.0.5 Maintenance DHCP Client INFO --- DHCP Client sending Requand going to REBIND stat

113 6.2.0 Maintenance DHCP Client INFO --- DHCP Client sending Requand going to REBIND stat

114 5.9.0 Maintenance DHCP Client INFO --- DHCP Client sending Requand going to RENEW state

114 6.0.5 Maintenance DHCP Client INFO --- DHCP Client sending Requand going to RENEW state

114 6.2.0 Maintenance DHCP Client INFO --- DHCP Client sending Requand going to RENEW state

115 5.9.0 Maintenance DHCP Client INFO --- Sending DHCP Request (Renewing).

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 14

ify and INIT

ify and INIT

ify and INIT

t

t

t

ate on

ate on

115 6.0.5 Maintenance DHCP Client INFO --- Sending DHCP Request (Renewing).

115 6.2.0 Maintenance DHCP Client INFO --- Sending DHCP Request (Renewing).

116 5.9.0 Maintenance DHCP Client INFO --- Sending DHCP Request (Rebinding).

116 6.0.5 Maintenance DHCP Client INFO --- Sending DHCP Request (Rebinding).

116 6.2.0 Maintenance DHCP Client INFO --- Sending DHCP Request (Rebinding).

117 5.9.0 Maintenance DHCP Client INFO --- Sending DHCP Request (Rebooting).

117 6.0.5 Maintenance DHCP Client INFO --- Sending DHCP Request (Rebooting).

117 6.2.0 Maintenance DHCP Client INFO --- Sending DHCP Request (Rebooting).

118 5.9.0 Maintenance DHCP Client INFO --- Sending DHCP Request (Verifying).

118 6.0.5 Maintenance DHCP Client INFO --- Sending DHCP Request (Verifying).

118 6.2.0 Maintenance DHCP Client INFO --- Sending DHCP Request (Verifying).

119 5.9.0 Maintenance DHCP Client INFO --- DHCP Client failed to verlease has expired. Go to state.

119 6.0.5 Maintenance DHCP Client INFO --- DHCP Client failed to verlease has expired. Go to state.

119 6.2.0 Maintenance DHCP Client INFO --- DHCP Client failed to verlease has expired. Go to state.

121 5.9.0 Maintenance DHCP Client INFO --- DHCP Client got a new IPaddress lease.

121 6.0.5 Maintenance DHCP Client INFO --- DHCP Client got a new IPaddress lease.

121 6.2.0 Maintenance DHCP Client INFO --- DHCP Client got a new IPaddress lease.

122 5.9.0 Maintenance DHCP Client INFO --- Sending DHCP RELEASE.

122 6.0.5 Maintenance DHCP Client INFO --- Sending DHCP RELEASE.

122 6.2.0 Maintenance DHCP Client INFO --- Sending DHCP RELEASE.

123 5.9.0 Maintenance Security Services INFO --- Access attempt from hoswithout Anti-Virus agent installed

123 6.0.5 Maintenance Security Services INFO --- Access attempt from hoswithout Anti-Virus agent installed

123 6.2.0 Maintenance Security Services INFO --- Access attempt from hoswithout Anti-Virus agent installed

124 5.9.0 Maintenance Security Services INFO --- Anti-Virus agent out-of-dhost

124 6.0.5 Maintenance Security Services INFO --- Anti-Virus agent out-of-dhost

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 15

ate on

d

d

d

cted

cted

cted

PN

PN

PN

lient,

124 6.2.0 Maintenance Security Services INFO --- Anti-Virus agent out-of-dhost

125 5.9.0 Maintenance Security Services WARNING 524 Received AV Alert: %s

125 6.0.5 Maintenance Security Services WARNING 524 Received AV Alert: %s

125 6.2.0 Maintenance Security Services WARNING 524 Received AV Alert: %s

127 5.9.0 Maintenance PPPoE INFO --- Starting PPPoE discovery

127 6.0.5 Maintenance PPPoE INFO --- Starting PPPoE discovery

127 6.2.0 Maintenance PPPoE INFO --- Starting PPPoE discovery

128 5.9.0 Maintenance PPPoE INFO --- PPPoE LCP Link Up

128 6.0.5 Maintenance PPPoE INFO --- PPPoE LCP Link Up

128 6.2.0 Maintenance PPPoE INFO --- PPPoE LCP Link Up

129 5.9.0 Maintenance PPPoE INFO --- PPPoE LCP Link Down

129 6.0.5 Maintenance PPPoE INFO --- PPPoE LCP Link Down

129 6.2.0 Maintenance PPPoE INFO --- PPPoE LCP Link Down

130 5.9.0 Maintenance PPPoE INFO --- PPPoE terminated

130 6.0.5 Maintenance PPPoE INFO --- PPPoE terminated

130 6.2.0 Maintenance PPPoE INFO --- PPPoE terminated

131 5.9.0 Maintenance PPPoE INFO --- PPPoE Network Connecte

131 6.0.5 Maintenance PPPoE INFO --- PPPoE Network Connecte

131 6.2.0 Maintenance PPPoE INFO --- PPPoE Network Connecte

132 5.9.0 Maintenance PPPoE INFO --- PPPoE Network Disconne

132 6.0.5 Maintenance PPPoE INFO --- PPPoE Network Disconne

132 6.2.0 Maintenance PPPoE INFO --- PPPoE Network Disconne

133 5.9.0 Maintenance PPPoE INFO --- PPPoE discovery process complete

133 6.0.5 Maintenance PPPoE INFO --- PPPoE discovery process complete

133 6.2.0 Maintenance PPPoE INFO --- PPPoE discovery process complete

134 5.9.0 Maintenance PPPoE INFO --- PPPoE starting CHAP Authentication

134 6.0.5 Maintenance PPPoE INFO --- PPPoE starting CHAP Authentication

134 6.2.0 Maintenance PPPoE INFO --- PPPoE starting CHAP Authentication

138 5.9.0 System Error Firewall Event WARNING 636 Wan IP Changed

138 6.0.5 System Error Firewall Event WARNING 636 Wan IP Changed

138 6.2.0 System Error Firewall Event WARNING 636 Wan IP Changed

139 5.9.0 User Activity VPN Client INFO --- XAUTH Succeeded with Vclient

139 6.0.5 User Activity VPN Client INFO --- XAUTH Succeeded with Vclient

139 6.2.0 User Activity VPN Client INFO --- XAUTH Succeeded with Vclient

140 5.9.0 User Activity VPN Client ERROR --- XAUTH Failed with VPN cAuthentication failure

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 16

lient,

lient,

lient, erver

lient, erver

lient, erver

ts from

ts from

ts from

eats

140 6.0.5 User Activity VPN Client ERROR --- XAUTH Failed with VPN cAuthentication failure

140 6.2.0 User Activity VPN Client ERROR --- XAUTH Failed with VPN cAuthentication failure

141 5.9.0 User Activity VPN Client INFO --- XAUTH Failed with VPN cCannot Contact RADIUS S

141 6.0.5 User Activity VPN Client INFO --- XAUTH Failed with VPN cCannot Contact RADIUS S

141 6.2.0 User Activity VPN Client INFO --- XAUTH Failed with VPN cCannot Contact RADIUS S

142 5.9.0 Debug Firewall Event ERROR --- Log Debug

142 6.0.5 Debug Firewall Event ERROR --- Log Debug

142 6.2.0 Debug Firewall Event ERROR --- Log Debug

143 5.9.0 Attack Firewall Event ERROR 525 Add an attack message

143 6.0.5 Attack Firewall Event ERROR 525 Add an attack message

143 6.2.0 Attack Firewall Event ERROR 525 Add an attack message

144 5.9.0 Maintenance High Availability ALERT 6201 Primary firewall has transitioned to Active

144 6.0.5 Maintenance High Availability ALERT --- Primary firewall has transitioned to Active

144 6.2.0 Maintenance High Availability ALERT 6201 Primary firewall has transitioned to Active

145 5.9.0 Maintenance High Availability ALERT 6202 Secondary firewall has transitioned to Active

145 6.0.5 Maintenance High Availability ALERT --- Secondary firewall has transitioned to Active

145 6.2.0 Maintenance High Availability ALERT 6202 Secondary firewall has transitioned to Active

146 5.9.0 System Error High Availability ALERT 6203 Primary firewall has transitioned to Standby

146 6.0.5 System Error High Availability ALERT 614 Primary firewall has transitioned to Standby

146 6.2.0 System Error High Availability ALERT 6203 Primary firewall has transitioned to Standby

147 5.9.0 Maintenance High Availability ALERT 6204 Secondary firewall has transitioned to Standby

147 6.0.5 Maintenance High Availability ALERT 6204 Secondary firewall has transitioned to Standby

147 6.2.0 Maintenance High Availability ALERT 6204 Secondary firewall has transitioned to Standby

148 5.9.0 System Error High Availability ERROR 615 Primary missed heartbeaSecondary

148 6.0.5 System Error High Availability ERROR 615 Primary missed heartbeaSecondary

148 6.2.0 System Error High Availability ERROR 615 Primary missed heartbeaSecondary

149 5.9.0 System Error High Availability ERROR 616 Secondary missed heartbfrom Primary

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 17

eats

eats

gnal

gnal

gnal

signal

signal

signal

ing

ing

ing

nized

nized

nized

er

er

er

etwork as

etwork as

etwork as

or

or

or

ent

ent

149 6.0.5 System Error High Availability ERROR 616 Secondary missed heartbfrom Primary

149 6.2.0 System Error High Availability ERROR 616 Secondary missed heartbfrom Primary

150 5.9.0 System Error High Availability ERROR 617 Primary received error sifrom Secondary

150 6.0.5 System Error High Availability ERROR 617 Primary received error sifrom Secondary

150 6.2.0 System Error High Availability ERROR 617 Primary received error sifrom Secondary

151 5.9.0 System Error High Availability ERROR 618 Secondary received errorfrom Primary

151 6.0.5 System Error High Availability ERROR 618 Secondary received errorfrom Primary

151 6.2.0 System Error High Availability ERROR 618 Secondary received errorfrom Primary

153 5.9.0 System Error High Availability ERROR 620 Primary firewall preemptSecondary

153 6.0.5 System Error High Availability ERROR 620 Primary firewall preemptSecondary

153 6.2.0 System Error High Availability ERROR 620 Primary firewall preemptSecondary

157 5.9.0 Maintenance High Availability INFO --- HA Peer Firewall Synchro

157 6.0.5 Maintenance High Availability INFO --- HA Peer Firewall Synchro

157 6.2.0 Maintenance High Availability INFO --- HA Peer Firewall Synchro

158 5.9.0 System Error High Availability ERROR 662 Error synchronizing HA pefirewall (%s)

158 6.0.5 System Error High Availability ERROR 662 Error synchronizing HA pefirewall (%s)

158 6.2.0 System Error High Availability ERROR 662 Error synchronizing HA pefirewall (%s)

159 5.9.0 Maintenance Security Services WARNING 526 Received AV Alert: Your NAnti-Virus subscRIPtion hexpired. %s

159 6.0.5 Maintenance Security Services WARNING 526 Received AV Alert: Your NAnti-Virus subscRIPtion hexpired. %s

159 6.2.0 Maintenance Security Services WARNING 526 Received AV Alert: Your NAnti-Virus subscRIPtion hexpired. %s

162 5.9.0 Maintenance High Availability INFO --- HA packet processing err

162 6.0.5 Maintenance High Availability INFO --- HA packet processing err

162 6.2.0 Maintenance High Availability INFO --- HA packet processing err

164 5.9.0 System Error Firewall Hardware ERROR 621 Diagnostic Code F

164 6.0.5 System Error Firewall Hardware ERROR 621 Diagnostic Code F

164 6.2.0 System Error Firewall Hardware ERROR 621 Diagnostic Code F

165 5.9.0 Attack Intrusion Detection

ALERT 527 Forbidden E-Mail attachmdisabled

165 6.0.5 Attack Intrusion Detection

ALERT 527 Forbidden E-Mail attachmdisabled

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 18

ent

to

to

to

ot

ot

ot

pped

pped

pped

opped

opped

opped

tected

tected

165 6.2.0 Attack Intrusion Detection

ALERT 527 Forbidden E-Mail attachmdisabled

168 5.9.0 Maintenance PPPoE INFO --- Disconnecting PPPoE duetraffic Timeout

168 6.0.5 Maintenance PPPoE INFO --- Disconnecting PPPoE duetraffic Timeout

168 6.2.0 Maintenance PPPoE INFO --- Disconnecting PPPoE duetraffic Timeout

169 5.9.0 Maintenance PPPoE INFO --- No response from ISP Disconnecting PPPoE.

169 6.0.5 Maintenance PPPoE INFO --- No response from ISP Disconnecting PPPoE.

169 6.2.0 Maintenance PPPoE INFO --- No response from ISP Disconnecting PPPoE.

170 5.9.0 System Error High Availability ERROR 622 Secondary going Active inpreempt mode after rebo

170 6.0.5 System Error High Availability ERROR 622 Secondary going Active inpreempt mode after rebo

170 6.2.0 System Error High Availability ERROR 622 Secondary going Active inpreempt mode after rebo

171 5.9.0 User Activity VPN IKE DEBUG --- %s

171 6.0.5 User Activity VPN IKE DEBUG --- %s

171 6.2.0 User Activity VPN IKE DEBUG --- %s

173 5.9.0 LAN TCP Network Access NOTICE --- TCP connection from LANdenied

173 6.0.5 LAN TCP Network Access NOTICE --- TCP connection from LANdenied

173 6.2.0 LAN TCP Network Access NOTICE --- TCP connection from LANdenied

174 5.9.0 LAN UDP | LAN TCP

Network Access NOTICE --- UDP packet from LAN dro

174 6.0.5 LAN UDP | LAN TCP

Network Access NOTICE --- UDP packet from LAN dro

174 6.2.0 LAN UDP | LAN TCP

Network Access NOTICE --- UDP packet from LAN dro

175 5.9.0 LAN ICMP | LAN TCP

Network Access NOTICE --- ICMP packet from LAN dr

175 6.0.5 LAN ICMP | LAN TCP

Network Access NOTICE --- ICMP packet from LAN dr

175 6.2.0 LAN ICMP | LAN TCP

Network Access NOTICE --- ICMP packet from LAN dr

177 5.9.0 Attack Intrusion Detection

ALERT 528 Probable TCP FIN scan de

177 6.0.5 Attack Intrusion Detection

ALERT 528 Probable TCP FIN scan de

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 19

tected

P eway

P eway

P eway

List; .

List; .

List; .

P eway

P eway

P eway

ist has

ist has

ist has

177 6.2.0 Attack Intrusion Detection

ALERT 528 Probable TCP FIN scan de

178 5.9.0 Attack Intrusion Detection

ALERT 529 Probable TCP XMAS scan detected

178 6.0.5 Attack Intrusion Detection

ALERT 529 Probable TCP XMAS scan detected

178 6.2.0 Attack Intrusion Detection

ALERT 529 Probable TCP XMAS scan detected

179 5.9.0 Attack Intrusion Detection

ALERT 530 Probable TCP NULL scan detected

179 6.0.5 Attack Intrusion Detection

ALERT 530 Probable TCP NULL scan detected

179 6.2.0 Attack Intrusion Detection

ALERT 530 Probable TCP NULL scan detected

180 5.9.0 Attack VPN IPsec ALERT 531 IPsec Replay Detected

180 6.0.5 Attack VPN IPsec ALERT 531 IPsec Replay Detected

180 6.2.0 Attack VPN IPsec ALERT 531 IPsec Replay Detected

181 5.9.0 Debug Network DEBUG --- TCP FIN packet dropped

181 6.0.5 Debug Network DEBUG --- TCP FIN packet dropped

181 6.2.0 Debug Network DEBUG --- TCP FIN packet dropped

182 5.9.0 User Activity Network INFO --- Received a path MTU ICMmessage from router/gat

182 6.0.5 User Activity Network INFO --- Received a path MTU ICMmessage from router/gat

182 6.2.0 User Activity Network INFO --- Received a path MTU ICMmessage from router/gat

183 5.9.0 System Error Security Services ERROR 623 Problem loading the URLAppliance not registered

183 6.0.5 System Error Security Services ERROR 623 Problem loading the URLAppliance not registered

183 6.2.0 System Error Security Services ERROR 623 Problem loading the URLAppliance not registered

188 5.9.0 User Activity Network INFO --- Received a path MTU ICMmessage from router/gat

188 6.0.5 User Activity Network INFO --- Received a path MTU ICMmessage from router/gat

188 6.2.0 User Activity Network INFO --- Received a path MTU ICMmessage from router/gat

190 5.9.0 System Error Security Services ERROR 628 The loaded content URL Lexpired.

190 6.0.5 System Error Security Services ERROR 628 The loaded content URL Lexpired.

190 6.2.0 System Error Security Services ERROR 628 The loaded content URL Lexpired.

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 20

ss of nually

ss of nually

ss of nually

llowed

llowed

llowed

enied

enied

enied

Started

Started

Started

rom

rom

rom

from

from

from

191 5.9.0 System Error High Availability ERROR 629 Error setting the IP addrethe Secondary, please maset to Secondary LAN IP

191 6.0.5 System Error High Availability ERROR 629 Error setting the IP addrethe Secondary, please maset to Secondary LAN IP

191 6.2.0 System Error High Availability ERROR 629 Error setting the IP addrethe Secondary, please maset to Secondary LAN IP

199 5.9.0 User Activity Authenticated Access

INFO --- CLI administrator login a

199 6.0.5 User Activity Authenticated Access

INFO --- CLI administrator login a

199 6.2.0 User Activity Authenticated Access

INFO --- CLI administrator login a

200 5.9.0 User Activity Authenticated Access

WARNING --- CLI administrator login ddue to bad credentials

200 6.0.5 User Activity Authenticated Access

WARNING --- CLI administrator login ddue to bad credentials

200 6.2.0 User Activity Authenticated Access

WARNING --- CLI administrator login ddue to bad credentials

201 5.9.0 Maintenance L2TP Client INFO --- L2TP Tunnel Negotiation

201 6.0.5 Maintenance L2TP Client INFO --- L2TP Tunnel Negotiation

201 6.2.0 Maintenance L2TP Client INFO --- L2TP Tunnel Negotiation

202 5.9.0 Maintenance L2TP Client INFO --- L2TP Session NegotiationStarted

202 6.0.5 Maintenance L2TP Client INFO --- L2TP Session NegotiationStarted

202 6.2.0 Maintenance L2TP Client INFO --- L2TP Session NegotiationStarted

204 5.9.0 Maintenance L2TP Client INFO --- L2TP Tunnel Established

204 6.0.5 Maintenance L2TP Client INFO --- L2TP Tunnel Established

204 6.2.0 Maintenance L2TP Client INFO --- L2TP Tunnel Established

205 5.9.0 Maintenance L2TP Client INFO --- L2TP Tunnel Disconnect fRemote

205 6.0.5 Maintenance L2TP Client INFO --- L2TP Tunnel Disconnect fRemote

205 6.2.0 Maintenance L2TP Client INFO --- L2TP Tunnel Disconnect fRemote

206 5.9.0 Maintenance L2TP Client INFO --- L2TP Session Established

206 6.0.5 Maintenance L2TP Client INFO --- L2TP Session Established

206 6.2.0 Maintenance L2TP Client INFO --- L2TP Session Established

207 5.9.0 Maintenance L2TP Client INFO --- L2TP Session Disconnect Remote

207 6.0.5 Maintenance L2TP Client INFO --- L2TP Session Disconnect Remote

207 6.2.0 Maintenance L2TP Client INFO --- L2TP Session Disconnect Remote

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 21

rted

rted

rted

Failed

Failed

Failed

el due

el due

el due

cal

cal

cal

rom

rom

rom

mote

mote

mote

vice,

208 5.9.0 Maintenance L2TP Client INFO --- L2TP PPP Negotiation Sta

208 6.0.5 Maintenance L2TP Client INFO --- L2TP PPP Negotiation Sta

208 6.2.0 Maintenance L2TP Client INFO --- L2TP PPP Negotiation Sta

210 5.9.0 Maintenance L2TP Client INFO --- L2TP PPP Session Up

210 6.0.5 Maintenance L2TP Client INFO --- L2TP PPP Session Up

210 6.2.0 Maintenance L2TP Client INFO --- L2TP PPP Session Up

211 5.9.0 Maintenance L2TP Client INFO --- L2TP PPP Down

211 6.0.5 Maintenance L2TP Client INFO --- L2TP PPP Down

211 6.2.0 Maintenance L2TP Client INFO --- L2TP PPP Down

212 5.9.0 Maintenance L2TP Client INFO --- L2TP PPP Authentication

212 6.0.5 Maintenance L2TP Client INFO --- L2TP PPP Authentication

212 6.2.0 Maintenance L2TP Client INFO --- L2TP PPP Authentication

215 5.9.0 Maintenance L2TP Client INFO --- Disconnecting L2TP Tunnto traffic Timeout

215 6.0.5 Maintenance L2TP Client INFO --- Disconnecting L2TP Tunnto traffic Timeout

215 6.2.0 Maintenance L2TP Client INFO --- Disconnecting L2TP Tunnto traffic Timeout

217 5.9.0 Maintenance L2TP Client INFO --- L2TP PPP link down

217 6.0.5 Maintenance L2TP Client INFO --- L2TP PPP link down

217 6.2.0 Maintenance L2TP Client INFO --- L2TP PPP link down

222 5.9.0 Maintenance DHCP Relay INFO --- DHCP RELEASE relayed toCentral Gateway

222 6.0.5 Maintenance DHCP Relay INFO --- DHCP RELEASE relayed toCentral Gateway

222 6.2.0 Maintenance DHCP Relay INFO --- DHCP RELEASE relayed toCentral Gateway

223 5.9.0 Maintenance DHCP Relay INFO --- DHCP lease relayed to lodevice

223 6.0.5 Maintenance DHCP Relay INFO --- DHCP lease relayed to lodevice

223 6.2.0 Maintenance DHCP Relay INFO --- DHCP lease relayed to lodevice

224 5.9.0 Debug DHCP Relay INFO --- DHCP RELEASE received fremote device

224 6.0.5 Debug DHCP Relay INFO --- DHCP RELEASE received fremote device

224 6.2.0 Debug DHCP Relay INFO --- DHCP RELEASE received fremote device

225 5.9.0 Debug DHCP Relay INFO --- DHCP lease relayed to redevice

225 6.0.5 Debug DHCP Relay INFO --- DHCP lease relayed to redevice

225 6.2.0 Debug DHCP Relay INFO --- DHCP lease relayed to redevice

226 5.9.0 Maintenance DHCP Relay INFO --- DHCP lease to LAN deviceconflicts with remote dedeleting remote IP entry

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 22

vice,

vice,

layed nflicts list

layed nflicts list

layed nflicts list

ase nflicts

ase nflicts

ase nflicts

ket to

ket to

ket to

e from

e from

e from

from

from

from

ntral

ntral

ntral

226 6.0.5 Maintenance DHCP Relay INFO --- DHCP lease to LAN deviceconflicts with remote dedeleting remote IP entry

226 6.2.0 Maintenance DHCP Relay INFO --- DHCP lease to LAN deviceconflicts with remote dedeleting remote IP entry

227 5.9.0 Maintenance DHCP Relay INFO --- WARNING: DHCP lease refrom Central Gateway cowith IP in Static Devices

227 6.0.5 Maintenance DHCP Relay INFO --- WARNING: DHCP lease refrom Central Gateway cowith IP in Static Devices

227 6.2.0 Maintenance DHCP Relay INFO --- WARNING: DHCP lease refrom Central Gateway cowith IP in Static Devices

228 5.9.0 Maintenance DHCP Relay WARNING --- DHCP lease dropped. Lefrom Central Gateway cowith Relay IP

228 6.0.5 Maintenance DHCP Relay WARNING --- DHCP lease dropped. Lefrom Central Gateway cowith Relay IP

228 6.2.0 Maintenance DHCP Relay WARNING --- DHCP lease dropped. Lefrom Central Gateway cowith Relay IP

229 5.9.0 Attack DHCP Relay ERROR 533 IP spoof detected on pacCentral Gateway, packetdropped

229 6.0.5 Attack DHCP Relay ERROR 533 IP spoof detected on pacCentral Gateway, packetdropped

229 6.2.0 Attack DHCP Relay ERROR 533 IP spoof detected on pacCentral Gateway, packetdropped

230 5.9.0 Maintenance DHCP Relay INFO --- Request for Relay IP TablCentral Gateway

230 6.0.5 Maintenance DHCP Relay INFO --- Request for Relay IP TablCentral Gateway

230 6.2.0 Maintenance DHCP Relay INFO --- Request for Relay IP TablCentral Gateway

231 5.9.0 Maintenance DHCP Relay INFO --- Requesting Relay IP TableRemote Gateway

231 6.0.5 Maintenance DHCP Relay INFO --- Requesting Relay IP TableRemote Gateway

231 6.2.0 Maintenance DHCP Relay INFO --- Requesting Relay IP TableRemote Gateway

232 5.9.0 Maintenance DHCP Relay INFO --- Sent Relay IP Table to CeGateway

232 6.0.5 Maintenance DHCP Relay INFO --- Sent Relay IP Table to CeGateway

232 6.2.0 Maintenance DHCP Relay INFO --- Sent Relay IP Table to CeGateway

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 23

rom

rom

rom

ay IP

ay IP

ay IP

ogin

ogin

ogin

login

login

login

gin

gin

gin

gin

gin

gin

c a

c a

c a

ec a

233 5.9.0 Maintenance DHCP Relay INFO --- Obtained Relay IP Table fRemote Gateway

233 6.0.5 Maintenance DHCP Relay INFO --- Obtained Relay IP Table fRemote Gateway

233 6.2.0 Maintenance DHCP Relay INFO --- Obtained Relay IP Table fRemote Gateway

234 5.9.0 System Error DHCP Relay WARNING 632 Failed to synchronize RelTable

234 6.0.5 System Error DHCP Relay WARNING 632 Failed to synchronize RelTable

234 6.2.0 System Error DHCP Relay WARNING 632 Failed to synchronize RelTable

235 5.9.0 User Activity Authenticated Access

INFO --- VPN zone administrator lallowed

235 6.0.5 User Activity Authenticated Access

INFO --- VPN zone administrator lallowed

235 6.2.0 User Activity Authenticated Access

INFO --- VPN zone administrator lallowed

236 5.9.0 User Activity Authenticated Access

INFO --- WAN zone administrator allowed

236 6.0.5 User Activity Authenticated Access

INFO --- WAN zone administrator allowed

236 6.2.0 User Activity Authenticated Access

INFO --- WAN zone administrator allowed

237 5.9.0 User Activity Authenticated Access

INFO --- VPN zone remote user loallowed

237 6.0.5 User Activity Authenticated Access

INFO --- VPN zone remote user loallowed

237 6.2.0 User Activity Authenticated Access

INFO --- VPN zone remote user loallowed

238 5.9.0 User Activity Authenticated Access

INFO --- WAN zone remote user loallowed

238 6.0.5 User Activity Authenticated Access

INFO --- WAN zone remote user loallowed

238 6.2.0 User Activity Authenticated Access

INFO --- WAN zone remote user loallowed

239 5.9.0 User Activity VPN IKE INFO --- NAT Discovery : Peer IPseSecurity Gateway behindNAT/NAPT Device

239 6.0.5 User Activity VPN IKE INFO --- NAT Discovery : Peer IPseSecurity Gateway behindNAT/NAPT Device

239 6.2.0 User Activity VPN IKE INFO --- NAT Discovery : Peer IPseSecurity Gateway behindNAT/NAPT Device

240 5.9.0 User Activity VPN IKE INFO --- NAT Discovery : Local IPsSecurity Gateway behindNAT/NAPT Device

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 24

ec a

ec a

NAPT IPsec

NAPT IPsec

NAPT IPsec

c l

c l

c l

S

S

S

S

S

S

S

S

S

has no that

has no that

has no that

gal host

240 6.0.5 User Activity VPN IKE INFO --- NAT Discovery : Local IPsSecurity Gateway behindNAT/NAPT Device

240 6.2.0 User Activity VPN IKE INFO --- NAT Discovery : Local IPsSecurity Gateway behindNAT/NAPT Device

241 5.9.0 User Activity VPN IKE INFO --- NAT Discovery : No NAT/device detected betweenSecurity gateways

241 6.0.5 User Activity VPN IKE INFO --- NAT Discovery : No NAT/device detected betweenSecurity gateways

241 6.2.0 User Activity VPN IKE INFO --- NAT Discovery : No NAT/device detected betweenSecurity gateways

242 5.9.0 User Activity VPN IKE INFO --- NAT Discovery : Peer IPseSecurity Gateway doesn'tsupport VPN NAT Traversa

242 6.0.5 User Activity VPN IKE INFO --- NAT Discovery : Peer IPseSecurity Gateway doesn'tsupport VPN NAT Traversa

242 6.2.0 User Activity VPN IKE INFO --- NAT Discovery : Peer IPseSecurity Gateway doesn'tsupport VPN NAT Traversa

243 5.9.0 User Activity RADIUS INFO --- User login denied - RADIUauthentication failure

243 6.0.5 User Activity RADIUS INFO --- User login denied - RADIUauthentication failure

243 6.2.0 User Activity RADIUS INFO --- User login denied - RADIUauthentication failure

244 5.9.0 User Activity RADIUS WARNING --- User login denied - RADIUserver Timeout

244 6.0.5 User Activity RADIUS WARNING --- User login denied - RADIUserver Timeout

244 6.2.0 User Activity RADIUS WARNING --- User login denied - RADIUserver Timeout

245 5.9.0 User Activity RADIUS WARNING --- User login denied - RADIUconfiguration error

245 6.0.5 User Activity RADIUS WARNING --- User login denied - RADIUconfiguration error

245 6.2.0 User Activity RADIUS WARNING --- User login denied - RADIUconfiguration error

246 5.9.0 User Activity Authenticated Access

INFO --- User login denied - User privileges for login from location

246 6.0.5 User Activity Authenticated Access

INFO --- User login denied - User privileges for login from location

246 6.2.0 User Activity Authenticated Access

INFO --- User login denied - User privileges for login from location

247 5.9.0 Maintenance VPN IPsec INFO --- IPsec packet from an ille

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 25

gal host

gal host

ent

ent

ent

not

- not

not

ing osed

ing osed

ing osed

remote t DHCP

remote t DHCP

remote t DHCP

for k

for k

for k

AN s not s a

AN s not s a

247 6.0.5 Maintenance VPN IPsec INFO --- IPsec packet from an ille

247 6.2.0 Maintenance VPN IPsec INFO --- IPsec packet from an ille

248 5.9.0 Attack Intrusion Detection

ERROR 534 Forbidden E-Mail attachmdeleted

248 6.0.5 Attack Intrusion Detection

ERROR 534 Forbidden E-Mail attachmdeleted

248 6.2.0 Attack Intrusion Detection

ERROR 534 Forbidden E-Mail attachmdeleted

249 5.9.0 User Activity VPN IKE WARNING 535 IKE Responder: Mode %s -tunnel mode

249 6.0.5 User Activity VPN IKE WARNING 535 IKE Responder: Mode %d tunnel mode

249 6.2.0 User Activity VPN IKE WARNING 535 IKE Responder: Mode %s -tunnel mode

250 5.9.0 User Activity VPN IKE WARNING 536 IKE Responder: No matchPhase 1 ID found for propremote network

250 6.0.5 User Activity VPN IKE WARNING 536 IKE Responder: No matchPhase 1 ID found for propremote network

250 6.2.0 User Activity VPN IKE WARNING 536 IKE Responder: No matchPhase 1 ID found for propremote network

251 5.9.0 User Activity VPN IKE WARNING 537 IKE Responder: Proposed network is 0.0.0.0 but norelay nor default route

251 6.0.5 User Activity VPN IKE WARNING 537 IKE Responder: Proposed network is 0.0.0.0 but norelay nor default route

251 6.2.0 User Activity VPN IKE WARNING 537 IKE Responder: Proposed network is 0.0.0.0 but norelay nor default route

252 5.9.0 User Activity VPN IKE WARNING 538 IKE Responder: No matchproposed remote networaddress

252 6.0.5 User Activity VPN IKE WARNING 538 IKE Responder: No matchproposed remote networaddress

252 6.2.0 User Activity VPN IKE WARNING 538 IKE Responder: No matchproposed remote networaddress

253 5.9.0 User Activity VPN IKE WARNING 539 IKE Responder: Default Lgateway is set but peer iproposing to use this SA adefault route

253 6.0.5 User Activity VPN IKE WARNING 539 IKE Responder: Default Lgateway is set but peer iproposing to use this SA adefault route

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 26

AN s not s a

all but s not

all but s not

all but s not

l but s not

l but s not

l but s not

oposed

oposed

oposed

oposed

oposed

oposed

t h

t h

t h

253 6.2.0 User Activity VPN IKE WARNING 539 IKE Responder: Default Lgateway is set but peer iproposing to use this SA adefault route

254 5.9.0 User Activity VPN IKE WARNING 540 IKE Responder: Tunnel terminates outside firewproposed local network iNAT public address

254 6.0.5 User Activity VPN IKE WARNING 540 IKE Responder: Tunnel terminates outside firewproposed local network iNAT public address

254 6.2.0 User Activity VPN IKE WARNING 540 IKE Responder: Tunnel terminates outside firewproposed local network iNAT public address

255 5.9.0 User Activity VPN IKE WARNING 541 IKE Responder: Tunnel terminates inside firewalproposed local network iinside firewall

255 6.0.5 User Activity VPN IKE WARNING 541 IKE Responder: Tunnel terminates inside firewalproposed local network iinside firewall

255 6.2.0 User Activity VPN IKE WARNING 541 IKE Responder: Tunnel terminates inside firewalproposed local network iinside firewall

256 5.9.0 User Activity VPN IKE WARNING 542 IKE Responder: Tunnel terminates on DMZ but prlocal network is on LAN

256 6.0.5 User Activity VPN IKE WARNING 542 IKE Responder: Tunnel terminates on DMZ but prlocal network is on LAN

256 6.2.0 User Activity VPN IKE WARNING 542 IKE Responder: Tunnel terminates on DMZ but prlocal network is on LAN

257 5.9.0 User Activity VPN IKE WARNING 543 IKE Responder: Tunnel terminates on LAN but prlocal network is on DMZ

257 6.0.5 User Activity VPN IKE WARNING 543 IKE Responder: Tunnel terminates on LAN but prlocal network is on DMZ

257 6.2.0 User Activity VPN IKE WARNING 543 IKE Responder: Tunnel terminates on LAN but prlocal network is on DMZ

258 5.9.0 User Activity VPN IKE WARNING 544 IKE Responder: AH PerfecForward Secrecy mismatc

258 6.0.5 User Activity VPN IKE WARNING 544 IKE Responder: AH PerfecForward Secrecy mismatc

258 6.2.0 User Activity VPN IKE WARNING 544 IKE Responder: AH PerfecForward Secrecy mismatc

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 27

ct h

ct h

ct h

s h

s h

s h

-

-

-

ssion

ssion

ssion

ty

ty

ty

259 5.9.0 User Activity VPN IKE WARNING 545 IKE Responder: ESP PerfeForward Secrecy mismatc

259 6.0.5 User Activity VPN IKE WARNING 545 IKE Responder: ESP PerfeForward Secrecy mismatc

259 6.2.0 User Activity VPN IKE WARNING 545 IKE Responder: ESP PerfeForward Secrecy mismatc

260 5.9.0 User Activity VPN IKE WARNING 546 IKE Responder: Algorithmand/or keys do not matc

260 6.0.5 User Activity VPN IKE WARNING 546 IKE Responder: Algorithmand/or keys do not matc

260 6.2.0 User Activity VPN IKE WARNING 546 IKE Responder: Algorithmand/or keys do not matc

261 5.9.0 User Activity Authenticated Access

INFO --- Administrator logged out

261 6.0.5 User Activity Authenticated Access

INFO --- Administrator logged out

261 6.2.0 User Activity Authenticated Access

INFO --- Administrator logged out

262 5.9.0 User Activity Authenticated Access

INFO --- Administrator logged outinactivity timer expired

262 6.0.5 User Activity Authenticated Access

INFO --- Administrator logged outinactivity timer expired

262 6.2.0 User Activity Authenticated Access

INFO --- Administrator logged outinactivity timer expired

263 5.9.0 User Activity Authenticated Access

INFO --- User logged out - %s

263 6.0.5 User Activity Authenticated Access

INFO --- User logged out

263 6.2.0 User Activity Authenticated Access

INFO --- User logged out - %s

264 5.9.0 User Activity Authenticated Access

INFO --- User logged out - max setime exceeded

264 6.0.5 User Activity Authenticated Access

INFO --- User logged out - max setime exceeded

264 6.2.0 User Activity Authenticated Access

INFO --- User logged out - max setime exceeded

265 5.9.0 User Activity Authenticated Access

INFO --- User logged out - inactivitimer expired

265 6.0.5 User Activity Authenticated Access

INFO --- User logged out - inactivitimer expired

265 6.2.0 User Activity Authenticated Access

INFO --- User logged out - inactivitimer expired

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 28

ort

ort

ort

old the

old the

old the

L

L

L

m

m

m

266 5.9.0 Maintenance VPN IPsec INFO --- NAT device may not suppIPsec AH pass-through

266 6.0.5 Maintenance VPN IPsec INFO --- NAT device may not suppIPsec AH pass-through

266 6.2.0 Maintenance VPN IPsec INFO --- NAT device may not suppIPsec AH pass-through

267 5.9.0 Attack Intrusion Detection

ALERT 547 TCP Xmas Tree dropped

267 6.0.5 Attack Intrusion Detection

ALERT 547 TCP Xmas Tree dropped

267 6.2.0 Attack Intrusion Detection

ALERT 547 TCP Xmas Tree dropped

269 5.9.0 User Activity VPN PKI INFO --- Requesting CRL from

269 6.0.5 User Activity VPN PKI INFO --- Requesting CRL from

269 6.2.0 User Activity VPN PKI INFO --- Requesting CRL from

270 5.9.0 User Activity VPN PKI INFO --- CRL loaded from

270 6.0.5 User Activity VPN PKI INFO --- CRL loaded from

270 6.2.0 User Activity VPN PKI INFO --- CRL loaded from

271 5.9.0 User Activity VPN PKI ALERT --- Failed to get CRL from

271 6.0.5 User Activity VPN PKI ALERT --- Failed to get CRL from

271 6.2.0 User Activity VPN PKI ALERT --- Failed to get CRL from

272 5.9.0 User Activity VPN PKI WARNING --- Not enough memory to hCRL

272 6.0.5 User Activity VPN PKI WARNING --- Not enough memory to hCRL

272 6.2.0 User Activity VPN PKI WARNING --- Not enough memory to hCRL

273 5.9.0 User Activity VPN PKI ALERT --- Connection timed out

273 6.0.5 User Activity VPN PKI ALERT --- Connection timed out

273 6.2.0 User Activity VPN PKI ALERT --- Connection timed out

274 5.9.0 User Activity VPN PKI ALERT --- Cannot connect to the CRserver

274 6.0.5 User Activity VPN PKI ALERT --- Cannot connect to the CRserver

274 6.2.0 User Activity VPN PKI ALERT --- Cannot connect to the CRserver

275 5.9.0 User Activity VPN PKI ERROR --- Unknown reason

275 6.0.5 User Activity VPN PKI ERROR --- Unknown reason

275 6.2.0 User Activity VPN PKI ERROR --- Unknown reason

276 5.9.0 User Activity VPN PKI ALERT --- Failed to Process CRL fro

276 6.0.5 User Activity VPN PKI ALERT --- Failed to Process CRL fro

276 6.2.0 User Activity VPN PKI ALERT --- Failed to Process CRL fro

277 5.9.0 User Activity VPN PKI ALERT --- Bad CRL format

277 6.0.5 User Activity VPN PKI ALERT --- Bad CRL format

277 6.2.0 User Activity VPN PKI ALERT --- Bad CRL format

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 29

st(CRL)

st(CRL)

st(CRL)

ine

ine

ine

ier umber

ier umber

ier umber

er is

er is

er is

er did

er did

er did

t %s

t %s

t %s

aling

aling

278 5.9.0 User Activity VPN PKI ALERT --- Issuer match failed

278 6.0.5 User Activity VPN PKI ALERT --- Issuer match failed

278 6.2.0 User Activity VPN PKI ALERT --- Issuer match failed

279 5.9.0 User Activity VPN PKI ALERT --- Certificate on Revoked li

279 6.0.5 User Activity VPN PKI ALERT --- Certificate on Revoked li

279 6.2.0 User Activity VPN PKI ALERT --- Certificate on Revoked li

280 5.9.0 User Activity VPN PKI ALERT --- No Certificate for

280 6.0.5 User Activity VPN PKI ALERT --- No Certificate for

280 6.2.0 User Activity VPN PKI ALERT --- No Certificate for

281 5.9.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Dialing: %s

281 6.0.5 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Dialing: %s

281 6.2.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Dialing: %s

282 5.9.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: No dial tonedetected - check phone-lconnection

282 6.0.5 User Activity PPP Dial-Up INFO --- PPP Dial-Up: No dial tonedetected - check phone-lconnection

282 6.2.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: No dial tonedetected - check phone-lconnection

283 5.9.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: No link carrdetected - check phone n

283 6.0.5 User Activity PPP Dial-Up INFO --- PPP Dial-Up: No link carrdetected - check phone n

283 6.2.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: No link carrdetected - check phone n

284 5.9.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Dialed numbbusy

284 6.0.5 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Dialed numbbusy

284 6.2.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Dialed numbbusy

285 5.9.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Dialed numbnot answer

285 6.0.5 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Dialed numbnot answer

285 6.2.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Dialed numbnot answer

286 5.9.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Connected abps - starting PPP

286 6.0.5 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Connected abps - starting PPP

286 6.2.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Connected abps - starting PPP

287 5.9.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Unknown difailure

287 6.0.5 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Unknown difailure

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 30

aling

lost

lost

lost

essful

essful

essful

failed - rd

failed - rd

failed - rd

failed ord

failed ord

failed ord

tion /

tion /

tion /

tication

tication

tication

it

287 6.2.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Unknown difailure

288 5.9.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Link carrier

288 6.0.5 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Link carrier

288 6.2.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Link carrier

289 5.9.0 --- PPP INFO --- PPP: Authentication succ

289 6.0.5 --- PPP INFO --- PPP: Authentication succ

289 6.2.0 --- PPP INFO --- PPP: Authentication succ

290 5.9.0 --- PPP INFO --- PPP: PAP Authentication check username / passwo

290 6.0.5 --- PPP INFO --- PPP: PAP Authentication check username / passwo

290 6.2.0 --- PPP INFO --- PPP: PAP Authentication check username / passwo

291 5.9.0 --- PPP INFO --- PPP: CHAP authentication- check username / passw

291 6.0.5 --- PPP INFO --- PPP: CHAP authentication- check username / passw

291 6.2.0 --- PPP INFO --- PPP: CHAP authentication- check username / passw

292 5.9.0 --- PPP INFO --- PPP: MS-CHAP authenticafailed - check username password

292 6.0.5 --- PPP INFO --- PPP: MS-CHAP authenticafailed - check username password

292 6.2.0 --- PPP INFO --- PPP: MS-CHAP authenticafailed - check username password

293 5.9.0 --- PPP INFO --- PPP: Starting MS-CHAP authentication

293 6.0.5 --- PPP INFO --- PPP: Starting MS-CHAP authentication

293 6.2.0 --- PPP INFO --- PPP: Starting MS-CHAP authentication

294 5.9.0 --- PPP INFO --- PPP: Starting CHAP authentication

294 6.0.5 --- PPP INFO --- PPP: Starting CHAP authentication

294 6.2.0 --- PPP INFO --- PPP: Starting CHAP authentication

295 5.9.0 --- PPP INFO --- PPP: Starting PAP authen

295 6.0.5 --- PPP INFO --- PPP: Starting PAP authen

295 6.2.0 --- PPP INFO --- PPP: Starting PAP authen

297 5.9.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Idle time limexceeded - disconnecting

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 31

it

it

w IP

w IP

w IP

n

n

n

n link

n link

n link

n : %s

n : %s

n : %s

uest

uest

uest

in use

in use

in use

l

l

l

n

n

n

297 6.0.5 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Idle time limexceeded - disconnecting

297 6.2.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Idle time limexceeded - disconnecting

299 5.9.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Received neaddress

299 6.0.5 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Received neaddress

299 6.2.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Received neaddress

300 5.9.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: PPP link established

300 6.0.5 User Activity PPP Dial-Up INFO --- PPP Dial-Up: PPP link established

300 6.2.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: PPP link established

301 5.9.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: PPP link dow

301 6.0.5 User Activity PPP Dial-Up INFO --- PPP Dial-Up: PPP link dow

301 6.2.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: PPP link dow

302 5.9.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Shutting dow

302 6.0.5 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Shutting dow

302 6.2.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Shutting dow

303 5.9.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Initializatio

303 6.0.5 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Initializatio

303 6.2.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Initializatio

306 5.9.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Connect reqcanceled

306 6.0.5 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Connect reqcanceled

306 6.2.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Connect reqcanceled

307 5.9.0 System Error WAN Failover WARNING 639 The network connection is %s

307 6.0.5 System Error WAN Failover WARNING 639 The network connection is %s

307 6.2.0 System Error WAN Failover WARNING 639 The network connection is %s

308 5.9.0 Maintenance L2TP Server INFO --- L2TP Server : L2TP TunneEstablished.

308 6.0.5 Maintenance L2TP Server INFO --- L2TP Server : L2TP TunneEstablished.

308 6.2.0 Maintenance L2TP Server INFO --- L2TP Server : L2TP TunneEstablished.

309 5.9.0 Maintenance L2TP Server INFO --- L2TP Server : L2TP SessioEstablished.

309 6.0.5 Maintenance L2TP Server INFO --- L2TP Server : L2TP SessioEstablished.

309 6.2.0 Maintenance L2TP Server INFO --- L2TP Server : L2TP SessioEstablished.

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 32

AP ilure

AP ilure

AP ilure

AP

AP

AP

ck details

ck details

ck details

ilover nual

ilover nual

ilover nual

d -

d -

311 5.9.0 Maintenance L2TP Server INFO --- L2TP Server: RADIUS/LDreports Authentication Fa

311 6.0.5 Maintenance L2TP Server INFO --- L2TP Server: RADIUS/LDreports Authentication Fa

311 6.2.0 Maintenance L2TP Server INFO --- L2TP Server: RADIUS/LDreports Authentication Fa

312 5.9.0 Maintenance L2TP Server INFO --- L2TP Server: Local Authentication Failure

312 6.0.5 Maintenance L2TP Server INFO --- L2TP Server: Local Authentication Failure

312 6.2.0 Maintenance L2TP Server INFO --- L2TP Server: Local Authentication Failure

318 5.9.0 Maintenance L2TP Server INFO --- L2TP Server: Local Authentication Success.

318 6.0.5 Maintenance L2TP Server INFO --- L2TP Server: Local Authentication Success.

318 6.2.0 Maintenance L2TP Server INFO --- L2TP Server: Local Authentication Success.

319 5.9.0 Maintenance L2TP Server INFO --- L2TP Server: RADIUS/LDAuthentication Success

319 6.0.5 Maintenance L2TP Server INFO --- L2TP Server: RADIUS/LDAuthentication Success

319 6.2.0 Maintenance L2TP Server INFO --- L2TP Server: RADIUS/LDAuthentication Success

321 5.9.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Manual intervention needed. ChePrimary Profile or Profile

321 6.0.5 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Manual intervention needed. ChePrimary Profile or Profile

321 6.2.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Manual intervention needed. ChePrimary Profile or Profile

322 5.9.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Trying to fabut Primary Profile is ma

322 6.0.5 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Trying to fabut Primary Profile is ma

322 6.2.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Trying to fabut Primary Profile is ma

326 5.9.0 System Error WAN Failover ALERT 637 Probing failure on %s

326 6.0.5 System Error WAN Failover ALERT 637 Probing failure on %s

326 6.2.0 System Error WAN Failover ALERT 637 Probing failure on %s

327 5.9.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Maximum connection time exceededisconnecting

327 6.0.5 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Maximum connection time exceededisconnecting

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 33

d -

ged

ged

ged

ceeded ess

ceeded ess

ceeded ess

in use .

in use .

in use .

king

king

king

nnect

nnect

nnect

e

e

e

e L2TP

e L2TP

e L2TP

sion nnel

327 6.2.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Maximum connection time exceededisconnecting

328 5.9.0 Maintenance Authenticated Access

INFO --- Administrator name chan

328 6.0.5 Maintenance Authenticated Access

INFO --- Administrator name chan

328 6.2.0 Maintenance Authenticated Access

INFO --- Administrator name chan

329 5.9.0 Attack Authenticated Access

ERROR 561 User login failure rate ex- logins from user IP addrdenied

329 6.0.5 Attack Authenticated Access

ERROR 561 User login failure rate ex- logins from user IP addrdenied

329 6.2.0 Attack Authenticated Access

ERROR 561 User login failure rate ex- logins from user IP addrdenied

330 5.9.0 Maintenance PPP Dial-Up INFO --- PPP Dial-Up: The profile disabled VPN networking

330 6.0.5 Maintenance PPP Dial-Up INFO --- PPP Dial-Up: The profile disabled VPN networking

330 6.2.0 Maintenance PPP Dial-Up INFO --- PPP Dial-Up: The profile disabled VPN networking

331 5.9.0 Maintenance PPP Dial-Up INFO --- PPP Dial-Up: VPN networrestored.

331 6.0.5 Maintenance PPP Dial-Up INFO --- PPP Dial-Up: VPN networrestored.

331 6.2.0 Maintenance PPP Dial-Up INFO --- PPP Dial-Up: VPN networrestored.

335 5.9.0 Maintenance L2TP Server INFO --- L2TP Server: Tunnel Discofrom Remote.

335 6.0.5 Maintenance L2TP Server INFO --- L2TP Server: Tunnel Discofrom Remote.

335 6.2.0 Maintenance L2TP Server INFO --- L2TP Server: Tunnel Discofrom Remote.

336 5.9.0 Maintenance L2TP Server INFO --- L2TP Server : Deleting thTunnel

336 6.0.5 Maintenance L2TP Server INFO --- L2TP Server : Deleting thTunnel

336 6.2.0 Maintenance L2TP Server INFO --- L2TP Server : Deleting thTunnel

337 5.9.0 Maintenance L2TP Server INFO --- L2TP Server : Deleting thactive Session

337 6.0.5 Maintenance L2TP Server INFO --- L2TP Server : Deleting thactive Session

337 6.2.0 Maintenance L2TP Server INFO --- L2TP Server : Deleting thactive Session

338 5.9.0 Maintenance L2TP Server INFO --- L2TP Server : RetransmisTimeout, Deleting the Tu

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 34

sion nnel

sion nnel

ceeds d

ceeds d

ceeds d

as

as

as

has

has

has

cally.

cally.

cally.

Mode

Mode

Mode

e IPsec et

e IPsec et

e IPsec et

d -

d -

d -

338 6.0.5 Maintenance L2TP Server INFO --- L2TP Server : RetransmisTimeout, Deleting the Tu

338 6.2.0 Maintenance L2TP Server INFO --- L2TP Server : RetransmisTimeout, Deleting the Tu

339 5.9.0 Debug Network DEBUG --- NAT translated packet exsize limit, packet droppe

339 6.0.5 Debug Network DEBUG --- NAT translated packet exsize limit, packet droppe

339 6.2.0 Debug Network DEBUG --- NAT translated packet exsize limit, packet droppe

340 5.9.0 Maintenance Firewall Event INFO --- HTTP management port hchanged

340 6.0.5 Maintenance Firewall Event INFO --- HTTP management port hchanged

340 6.2.0 Maintenance Firewall Event INFO --- HTTP management port hchanged

341 5.9.0 Maintenance Firewall Event INFO --- HTTPS management portchanged

341 6.0.5 Maintenance Firewall Event INFO --- HTTPS management portchanged

341 6.2.0 Maintenance Firewall Event INFO --- HTTPS management portchanged

344 5.9.0 Maintenance L2TP Server INFO --- L2TP Server : User Nameauthentication Failure lo

344 6.0.5 Maintenance L2TP Server INFO --- L2TP Server : User Nameauthentication Failure lo

344 6.2.0 Maintenance L2TP Server INFO --- L2TP Server : User Nameauthentication Failure lo

346 5.9.0 User Activity VPN IKE INFO --- IKE Initiator: Start Quick (Phase 2).

346 6.0.5 User Activity VPN IKE INFO --- IKE Initiator: Start Quick (Phase 2).

346 6.2.0 User Activity VPN IKE INFO --- IKE Initiator: Start Quick (Phase 2).

347 5.9.0 TCP | UDP | ICMP

Network Access WARNING --- Port configured to receivprotocol ONLY; drop packreceived in the clear

347 6.0.5 TCP | UDP | ICMP

Network Access WARNING --- Port configured to receivprotocol ONLY; drop packreceived in the clear

347 6.2.0 TCP | UDP | ICMP

Network Access WARNING --- Port configured to receivprotocol ONLY; drop packreceived in the clear

348 5.9.0 Maintenance Firewall Event WARNING --- Imported VPN SA is invalidisabled

348 6.0.5 Maintenance Firewall Event WARNING --- Imported VPN SA is invalidisabled

348 6.2.0 Maintenance Firewall Event WARNING --- Imported VPN SA is invalidisabled

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 35

ode

ode

ode

Quick

Quick

Quick

ode

ode

ode

Main

Main

Main

(Phase

(Phase

(Phase

e

e

350 5.9.0 User Activity VPN IKE INFO --- IKE SA lifetime expired.

350 6.0.5 User Activity VPN IKE INFO --- IKE SA lifetime expired.

350 6.2.0 User Activity VPN IKE INFO --- IKE SA lifetime expired.

351 5.9.0 User Activity VPN IKE INFO --- IKE Initiator: Start Main Mnegotiation (Phase 1)

351 6.0.5 User Activity VPN IKE INFO --- IKE Initiator: Start Main Mnegotiation (Phase 1)

351 6.2.0 User Activity VPN IKE INFO --- IKE Initiator: Start Main Mnegotiation (Phase 1)

352 5.9.0 User Activity VPN IKE INFO --- IKE Responder: Received Mode Request (Phase 2)

352 6.0.5 User Activity VPN IKE INFO --- IKE Responder: Received Mode Request (Phase 2)

352 6.2.0 User Activity VPN IKE INFO --- IKE Responder: Received Mode Request (Phase 2)

353 5.9.0 User Activity VPN IKE INFO --- IKE Initiator: Main Mode complete (Phase 1)

353 6.0.5 User Activity VPN IKE INFO --- IKE Initiator: Main Mode complete (Phase 1)

353 6.2.0 User Activity VPN IKE INFO --- IKE Initiator: Main Mode complete (Phase 1)

354 5.9.0 User Activity VPN IKE INFO --- IKE Initiator: Aggressive Mcomplete (Phase 1).

354 6.0.5 User Activity VPN IKE INFO --- IKE Initiator: Aggressive Mcomplete (Phase 1).

354 6.2.0 User Activity VPN IKE INFO --- IKE Initiator: Aggressive Mcomplete (Phase 1).

355 5.9.0 User Activity VPN IKE INFO --- IKE Responder: Received Mode Request (Phase 1)

355 6.0.5 User Activity VPN IKE INFO --- IKE Responder: Received Mode Request (Phase 1)

355 6.2.0 User Activity VPN IKE INFO --- IKE Responder: Received Mode Request (Phase 1)

356 5.9.0 User Activity VPN IKE INFO --- IKE Responder: Received Aggressive Mode Request1)

356 6.0.5 User Activity VPN IKE INFO --- IKE Responder: Received Aggressive Mode Request1)

356 6.2.0 User Activity VPN IKE INFO --- IKE Responder: Received Aggressive Mode Request1)

357 5.9.0 User Activity VPN IKE INFO --- IKE Responder: Main Modcomplete (Phase 1)

357 6.0.5 User Activity VPN IKE INFO --- IKE Responder: Main Modcomplete (Phase 1)

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 36

e

sive 1)

sive 1)

sive 1)

iled

iled

iled

iled

iled

iled

t failed

t failed

t failed

st

st

st

h SHA

h SHA

h SHA

ith SHA

ith SHA

ith SHA

357 6.2.0 User Activity VPN IKE INFO --- IKE Responder: Main Modcomplete (Phase 1)

358 5.9.0 User Activity VPN IKE INFO --- IKE Initiator: Start AggresMode negotiation (Phase

358 6.0.5 User Activity VPN IKE INFO --- IKE Initiator: Start AggresMode negotiation (Phase

358 6.2.0 User Activity VPN IKE INFO --- IKE Initiator: Start AggresMode negotiation (Phase

360 5.9.0 Maintenance Crypto Test ERROR --- Crypto DES test failed

360 6.0.5 Maintenance Crypto Test ERROR --- Crypto DES test failed

360 6.2.0 Maintenance Crypto Test ERROR --- Crypto DES test failed

361 5.9.0 Maintenance Crypto Test ERROR --- Crypto DH test failed

361 6.0.5 Maintenance Crypto Test ERROR --- Crypto DH test failed

361 6.2.0 Maintenance Crypto Test ERROR --- Crypto DH test failed

362 5.9.0 Maintenance Crypto Test ERROR --- Crypto Hmac-MD5 test fa

362 6.0.5 Maintenance Crypto Test ERROR --- Crypto Hmac-MD5 test fa

362 6.2.0 Maintenance Crypto Test ERROR --- Crypto Hmac-MD5 test fa

363 5.9.0 Maintenance Crypto Test ERROR --- Crypto Hmac-Sha1 test fa

363 6.0.5 Maintenance Crypto Test ERROR --- Crypto Hmac-Sha1 test fa

363 6.2.0 Maintenance Crypto Test ERROR --- Crypto Hmac-Sha1 test fa

364 5.9.0 Maintenance Crypto Test ERROR --- Crypto RSA test failed

364 6.0.5 Maintenance Crypto Test ERROR --- Crypto RSA test failed

364 6.2.0 Maintenance Crypto Test ERROR --- Crypto RSA test failed

365 5.9.0 Maintenance Crypto Test ERROR --- Crypto Sha1 test failed

365 6.0.5 Maintenance Crypto Test ERROR --- Crypto Sha1 test failed

365 6.2.0 Maintenance Crypto Test ERROR --- Crypto Sha1 test failed

366 5.9.0 Maintenance Crypto Test ERROR --- Crypto hardware DES tes

366 6.0.5 Maintenance Crypto Test ERROR --- Crypto hardware DES tes

366 6.2.0 Maintenance Crypto Test ERROR --- Crypto hardware DES tes

367 5.9.0 Maintenance Crypto Test ERROR --- Crypto hardware 3DES tefailed

367 6.0.5 Maintenance Crypto Test ERROR --- Crypto hardware 3DES tefailed

367 6.2.0 Maintenance Crypto Test ERROR --- Crypto hardware 3DES tefailed

368 5.9.0 Maintenance Crypto Test ERROR --- Crypto hardware DES wittest failed

368 6.0.5 Maintenance Crypto Test ERROR --- Crypto hardware DES wittest failed

368 6.2.0 Maintenance Crypto Test ERROR --- Crypto hardware DES wittest failed

369 5.9.0 Maintenance Crypto Test ERROR --- Crypto Hardware 3DES wtest failed

369 6.0.5 Maintenance Crypto Test ERROR --- Crypto Hardware 3DES wtest failed

369 6.2.0 Maintenance Crypto Test ERROR --- Crypto Hardware 3DES wtest failed

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 37

ning

ning

ning

sec

sec

sec

e Mode

e Mode

e Mode

rom

rom

rom

from

from

from

rted

371 5.9.0 User Activity VPN Client INFO --- VPN Client Policy Provisio

371 6.0.5 User Activity VPN Client INFO --- VPN Client Policy Provisio

371 6.2.0 User Activity VPN Client INFO --- VPN Client Policy Provisio

372 5.9.0 User Activity VPN IKE INFO --- IKE Initiator: Accepting IPproposal (Phase 2)

372 6.0.5 User Activity VPN IKE INFO --- IKE Initiator: Accepting IPproposal (Phase 2)

372 6.2.0 User Activity VPN IKE INFO --- IKE Initiator: Accepting IPproposal (Phase 2)

373 5.9.0 User Activity VPN IKE INFO --- IKE Responder: Aggressivcomplete (Phase 1)

373 6.0.5 User Activity VPN IKE INFO --- IKE Responder: Aggressivcomplete (Phase 1)

373 6.2.0 User Activity VPN IKE INFO --- IKE Responder: Aggressivcomplete (Phase 1)

375 5.9.0 Maintenance PPTP INFO --- PPTP Control ConnectionNegotiation Started

375 6.0.5 Maintenance PPTP INFO --- PPTP Control ConnectionNegotiation Started

375 6.2.0 Maintenance PPTP INFO --- PPTP Control ConnectionNegotiation Started

376 5.9.0 Maintenance PPTP INFO --- PPTP Session NegotiationStarted

376 6.0.5 Maintenance PPTP INFO --- PPTP Session NegotiationStarted

376 6.2.0 Maintenance PPTP INFO --- PPTP Session NegotiationStarted

378 5.9.0 Maintenance PPTP INFO --- PPTP Control ConnectionEstablished

378 6.0.5 Maintenance PPTP INFO --- PPTP Control ConnectionEstablished

378 6.2.0 Maintenance PPTP INFO --- PPTP Control ConnectionEstablished

379 5.9.0 Maintenance PPTP INFO --- PPTP Tunnel Disconnect fRemote

379 6.0.5 Maintenance PPTP INFO --- PPTP Tunnel Disconnect fRemote

379 6.2.0 Maintenance PPTP INFO --- PPTP Tunnel Disconnect fRemote

380 5.9.0 Maintenance PPTP INFO --- PPTP Session Established

380 6.0.5 Maintenance PPTP INFO --- PPTP Session Established

380 6.2.0 Maintenance PPTP INFO --- PPTP Session Established

381 5.9.0 Maintenance PPTP INFO --- PPTP Session Disconnect Remote

381 6.0.5 Maintenance PPTP INFO --- PPTP Session Disconnect Remote

381 6.2.0 Maintenance PPTP INFO --- PPTP Session Disconnect Remote

382 5.9.0 Maintenance PPTP INFO --- PPTP PPP Negotiation Sta

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 38

rted

rted

by the

by the

by the

el due

el due

el due

y the

y the

y the

382 6.0.5 Maintenance PPTP INFO --- PPTP PPP Negotiation Sta

382 6.2.0 Maintenance PPTP INFO --- PPTP PPP Negotiation Sta

384 5.9.0 Maintenance PPTP INFO --- PPTP PPP Session Up

384 6.0.5 Maintenance PPTP INFO --- PPTP PPP Session Up

384 6.2.0 Maintenance PPTP INFO --- PPTP PPP Session Up

385 5.9.0 Maintenance PPTP INFO --- PPTP PPP Down

385 6.0.5 Maintenance PPTP INFO --- PPTP PPP Down

385 6.2.0 Maintenance PPTP INFO --- PPTP PPP Down

388 5.9.0 Maintenance PPTP INFO --- PPTP Disconnect InitiatedUser

388 6.0.5 Maintenance PPTP INFO --- PPTP Disconnect InitiatedUser

388 6.2.0 Maintenance PPTP INFO --- PPTP Disconnect InitiatedUser

389 5.9.0 Maintenance PPTP INFO --- Disconnecting PPTP Tunnto traffic Timeout

389 6.0.5 Maintenance PPTP INFO --- Disconnecting PPTP Tunnto traffic Timeout

389 6.2.0 Maintenance PPTP INFO --- Disconnecting PPTP Tunnto traffic Timeout

390 5.9.0 Maintenance PPTP INFO --- PPTP Connect Initiated bUser

390 6.0.5 Maintenance PPTP INFO --- PPTP Connect Initiated bUser

390 6.2.0 Maintenance PPTP INFO --- PPTP Connect Initiated bUser

392 5.9.0 Maintenance PPTP INFO --- PPTP starting CHAP Authentication

392 6.0.5 Maintenance PPTP INFO --- PPTP starting CHAP Authentication

392 6.2.0 Maintenance PPTP INFO --- PPTP starting CHAP Authentication

393 5.9.0 Maintenance PPTP INFO --- PPTP starting PAP Authentication

393 6.0.5 Maintenance PPTP INFO --- PPTP starting PAP Authentication

393 6.2.0 Maintenance PPTP INFO --- PPTP starting PAP Authentication

396 5.9.0 Maintenance PPTP INFO --- PPTP PAP Authenticationsuccess.

396 6.0.5 Maintenance PPTP INFO --- PPTP PAP Authenticationsuccess.

396 6.2.0 Maintenance PPTP INFO --- PPTP PAP Authenticationsuccess.

398 5.9.0 Maintenance PPTP INFO --- PPTP PPP Link Up

398 6.0.5 Maintenance PPTP INFO --- PPTP PPP Link Up

398 6.2.0 Maintenance PPTP INFO --- PPTP PPP Link Up

399 5.9.0 Maintenance PPTP INFO --- PPTP PPP Link down

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 39

sal

sal

sal

ue to

ue to

ue to

n after hared

n after hared

n after hared

ission.

ission.

ission.

ded

ded

ded

399 6.0.5 Maintenance PPTP INFO --- PPTP PPP Link down

399 6.2.0 Maintenance PPTP INFO --- PPTP PPP Link down

400 5.9.0 Maintenance PPTP INFO --- PPTP PPP Link Finished

400 6.0.5 Maintenance PPTP INFO --- PPTP PPP Link Finished

400 6.2.0 Maintenance PPTP INFO --- PPTP PPP Link Finished

401 5.9.0 User Activity VPN IKE WARNING --- Received notify. NO_PROPOSAL_CHOSEN

401 6.0.5 User Activity VPN IKE WARNING --- Received notify. NO_PROPOSAL_CHOSEN

401 6.2.0 User Activity VPN IKE WARNING --- Received notify. NO_PROPOSAL_CHOSEN

402 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: IKE propodoes not match (Phase 1)

402 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: IKE propodoes not match (Phase 1)

402 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: IKE propodoes not match (Phase 1)

403 5.9.0 User Activity VPN IKE INFO --- IKE negotiation aborted dTimeout

403 6.0.5 User Activity VPN IKE INFO --- IKE negotiation aborted dTimeout

403 6.2.0 User Activity VPN IKE INFO --- IKE negotiation aborted dTimeout

404 5.9.0 User Activity VPN IKE WARNING --- Failed payload verificatiodecryption; possible preskey mismatch

404 6.0.5 User Activity VPN IKE WARNING --- Failed payload verificatiodecryption; possible preskey mismatch

404 6.2.0 User Activity VPN IKE WARNING --- Failed payload verificatiodecryption; possible preskey mismatch

405 5.9.0 User Activity VPN IKE WARNING --- Failed payload validation

405 6.0.5 User Activity VPN IKE WARNING --- Failed payload validation

405 6.2.0 User Activity VPN IKE WARNING --- Failed payload validation

406 5.9.0 User Activity VPN IKE WARNING --- Received packet retransmDrop duplicate packet

406 6.0.5 User Activity VPN IKE WARNING --- Received packet retransmDrop duplicate packet

406 6.2.0 User Activity VPN IKE WARNING --- Received packet retransmDrop duplicate packet

408 5.9.0 Maintenance Security Services INFO --- Anti-Virus Licenses Excee

408 6.0.5 Maintenance Security Services INFO --- Anti-Virus Licenses Excee

408 6.2.0 Maintenance Security Services INFO --- Anti-Virus Licenses Excee

409 5.9.0 User Activity VPN IKE WARNING --- Received notify: ISAKMP_AUTH_FAILED

409 6.0.5 User Activity VPN IKE WARNING --- Received notify: ISAKMP_AUTH_FAILED

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 40

match

match

match

quest

quest

quest

SPI

SPI

SPI

%s

%s

%s

ce %s

ce %s

ce %s

ce %s

ce %s

ce %s

409 6.2.0 User Activity VPN IKE WARNING --- Received notify: ISAKMP_AUTH_FAILED

410 5.9.0 User Activity VPN IKE WARNING --- Computed hash does not hash received from peer;preshared key mismatch

410 6.0.5 User Activity VPN IKE WARNING --- Computed hash does not hash received from peer;preshared key mismatch

410 6.2.0 User Activity VPN IKE WARNING --- Computed hash does not hash received from peer;preshared key mismatch

411 5.9.0 User Activity VPN IKE WARNING --- Received notify: PAYLOAD_MALFORMED

411 6.0.5 User Activity VPN IKE WARNING --- Received notify: PAYLOAD_MALFORMED

411 6.2.0 User Activity VPN IKE WARNING --- Received notify: PAYLOAD_MALFORMED

412 5.9.0 User Activity VPN IKE INFO --- Received IPsec SA deleterequest

412 6.0.5 User Activity VPN IKE INFO --- Received IPsec SA deleterequest

412 6.2.0 User Activity VPN IKE INFO --- Received IPsec SA deleterequest

413 5.9.0 User Activity VPN IKE INFO --- Received IKE SA delete re

413 6.0.5 User Activity VPN IKE INFO --- Received IKE SA delete re

413 6.2.0 User Activity VPN IKE INFO --- Received IKE SA delete re

414 5.9.0 User Activity VPN IKE INFO --- Received notify: INVALID_COOKIES

414 6.0.5 User Activity VPN IKE INFO --- Received notify: INVALID_COOKIES

414 6.2.0 User Activity VPN IKE INFO --- Received notify: INVALID_COOKIES

415 5.9.0 User Activity VPN IKE INFO --- Received notify: RESPONDER_LIFETIME

415 6.0.5 User Activity VPN IKE INFO --- Received notify: RESPONDER_LIFETIME

415 6.2.0 User Activity VPN IKE INFO --- Received notify: RESPONDER_LIFETIME

416 5.9.0 User Activity VPN IKE INFO --- Received notify: INVALID_

416 6.0.5 User Activity VPN IKE INFO --- Received notify: INVALID_

416 6.2.0 User Activity VPN IKE INFO --- Received notify: INVALID_

419 5.9.0 Maintenance RIP INFO 8401 RIP disabled on interface

419 6.0.5 Maintenance RIP INFO 8401 RIP disabled on interface

419 6.2.0 Maintenance RIP INFO 8401 RIP disabled on interface

420 5.9.0 Maintenance RIP INFO 8402 RIPv1 enabled on interfa

420 6.0.5 Maintenance RIP INFO 8402 RIPv1 enabled on interfa

420 6.2.0 Maintenance RIP INFO 8402 RIPv1 enabled on interfa

421 5.9.0 Maintenance RIP INFO 8403 RIPv2 enabled on interfa

421 6.0.5 Maintenance RIP INFO 8403 RIPv2 enabled on interfa

421 6.2.0 Maintenance RIP INFO 8403 RIPv2 enabled on interfa

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 41

dcast) ce %s

dcast) ce %s

dcast) ce %s

rface

rface

rface

erface

erface

erface

erface

erface

erface

dcast) terface

dcast) terface

dcast) terface

ed

ed

ed

o Echo PPTP

o Echo PPTP

o Echo PPTP

rver to sts

422 5.9.0 Maintenance RIP INFO 8404 RIPv2 compatibility (broamode enabled on interfa

422 6.0.5 Maintenance RIP INFO 8404 RIPv2 compatibility (broamode enabled on interfa

422 6.2.0 Maintenance RIP INFO 8404 RIPv2 compatibility (broamode enabled on interfa

423 5.9.0 Maintenance RIP INFO 8405 RIP disabled on DMZ inte

423 6.0.5 Maintenance RIP INFO 8405 RIP disabled on DMZ inte

423 6.2.0 Maintenance RIP INFO 8405 RIP disabled on DMZ inte

424 5.9.0 Maintenance RIP INFO 8406 RIPv1 enabled on DMZ int

424 6.0.5 Maintenance RIP INFO 8406 RIPv1 enabled on DMZ int

424 6.2.0 Maintenance RIP INFO 8406 RIPv1 enabled on DMZ int

425 5.9.0 Maintenance RIP INFO 8407 RIPv2 enabled on DMZ int

425 6.0.5 Maintenance RIP INFO 8407 RIPv2 enabled on DMZ int

425 6.2.0 Maintenance RIP INFO 8407 RIPv2 enabled on DMZ int

426 5.9.0 Maintenance RIP INFO 8408 RIPv2 compatibility (broamode enabled on DMZ in

426 6.0.5 Maintenance RIP INFO 8408 RIPv2 compatibility (broamode enabled on DMZ in

426 6.2.0 Maintenance RIP INFO 8408 RIPv2 compatibility (broamode enabled on DMZ in

427 5.9.0 VPN Tunnel Status

VPN INFO 801 IPsec Tunnel status chang

427 6.0.5 VPN Tunnel Status

VPN INFO 801 IPsec Tunnel status chang

427 6.2.0 VPN Tunnel Status

VPN INFO 801 IPsec Tunnel status chang

428 5.9.0 Debug Intrusion Detection

WARNING --- Source routed IP packet dropped

428 6.0.5 Debug Intrusion Detection

WARNING --- Source routed IP packet dropped

428 6.2.0 Debug Intrusion Detection

WARNING --- Source routed IP packet dropped

429 5.9.0 Maintenance PPTP INFO --- No response from server tRequests, disconnecting Tunnel

429 6.0.5 Maintenance PPTP INFO --- No response from server tRequests, disconnecting Tunnel

429 6.2.0 Maintenance PPTP INFO --- No response from server tRequests, disconnecting Tunnel

430 5.9.0 Maintenance PPTP INFO --- No response from PPTP secontrol connection reque

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 42

rver to sts

rver to sts

rver to

rver to

rver to

trol

trol

trol

call

call

call

ilover anual

ilover anual

ilover anual

%s

%s

%s

owed -

owed -

owed -

430 6.0.5 Maintenance PPTP INFO --- No response from PPTP secontrol connection reque

430 6.2.0 Maintenance PPTP INFO --- No response from PPTP secontrol connection reque

431 5.9.0 Maintenance PPTP INFO --- No response from PPTP secall requests

431 6.0.5 Maintenance PPTP INFO --- No response from PPTP secall requests

431 6.2.0 Maintenance PPTP INFO --- No response from PPTP secall requests

432 5.9.0 Maintenance PPTP INFO --- PPTP server rejected conconnection

432 6.0.5 Maintenance PPTP INFO --- PPTP server rejected conconnection

432 6.2.0 Maintenance PPTP INFO --- PPTP server rejected conconnection

433 5.9.0 Maintenance PPTP INFO --- PPTP server rejected therequest

433 6.0.5 Maintenance PPTP INFO --- PPTP server rejected therequest

433 6.2.0 Maintenance PPTP INFO --- PPTP server rejected therequest

434 5.9.0 User Activity WAN Failover INFO --- PPP Dial-Up: Trying to fabut Alternate Profile is m

434 6.0.5 User Activity WAN Failover INFO --- PPP Dial-Up: Trying to fabut Alternate Profile is m

434 6.2.0 User Activity WAN Failover INFO --- PPP Dial-Up: Trying to fabut Alternate Profile is m

435 5.9.0 System Error WAN Failover ALERT 652 WLB Failback initiated by

435 6.0.5 System Error WAN Failover ALERT 652 WLB Failback initiated by

435 6.2.0 System Error WAN Failover ALERT 652 WLB Failback initiated by

436 5.9.0 System Error WAN Failover ALERT 638 Probing succeeded on %s

436 6.0.5 System Error WAN Failover ALERT 638 Probing succeeded on %s

436 6.2.0 System Error WAN Failover ALERT 638 Probing succeeded on %s

437 5.9.0 Attack Intrusion Detection

ERROR 550 E-Mail fragment dropped

437 6.0.5 Attack Intrusion Detection

ERROR 550 E-Mail fragment dropped

437 6.2.0 Attack Intrusion Detection

ERROR 550 E-Mail fragment dropped

438 5.9.0 User Activity Authenticated Access

INFO --- Locked-out user logins alllockout period expired

438 6.0.5 User Activity Authenticated Access

INFO --- Locked-out user logins alllockout period expired

438 6.2.0 User Activity Authenticated Access

INFO --- Locked-out user logins alllockout period expired

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 43

lowed

lowed

lowed

efaults

efaults

efaults

ding, and

ding, and

ding, and

eer

eer

eer

attack

attack

attack

r too

r too

r too

439 5.9.0 User Activity Authenticated Access

INFO --- Locked-out user logins alby %s

439 6.0.5 User Activity Authenticated Access

INFO --- Locked-out user logins alby administrator

439 6.2.0 User Activity Authenticated Access

INFO --- Locked-out user logins alby %s

440 5.9.0 User Activity Firewall Rule INFO --- Access rule added

440 6.0.5 User Activity Firewall Rule INFO --- Access rule added

440 6.2.0 User Activity Firewall Rule INFO --- Access rule added

441 5.9.0 User Activity Firewall Rule INFO --- Access rule modified

441 6.0.5 User Activity Firewall Rule INFO --- Access rule modified

441 6.2.0 User Activity Firewall Rule INFO --- Access rule modified

442 5.9.0 User Activity Firewall Rule INFO --- Access rule deleted

442 6.0.5 User Activity Firewall Rule INFO --- Access rule deleted

442 6.2.0 User Activity Firewall Rule INFO --- Access rule deleted

443 5.9.0 User Activity Firewall Rule INFO --- Access rules restored to d

443 6.0.5 User Activity Firewall Rule INFO --- Access rules restored to d

443 6.2.0 User Activity Firewall Rule INFO --- Access rules restored to d

444 5.9.0 Maintenance PPTP INFO --- PPTP Server is not responcheck if the server is UP running.

444 6.0.5 Maintenance PPTP INFO --- PPTP Server is not responcheck if the server is UP running.

444 6.2.0 Maintenance PPTP INFO --- PPTP Server is not responcheck if the server is UP running.

445 5.9.0 User Activity VPN IKE INFO --- IKE Initiator: Accepting plifetime. (Phase 1)

445 6.0.5 User Activity VPN IKE INFO --- IKE Initiator: Accepting plifetime. (Phase 1)

445 6.2.0 User Activity VPN IKE INFO --- IKE Initiator: Accepting plifetime. (Phase 1)

446 5.9.0 Attack Intrusion Detection

ERROR 551 FTP: PASV response spoofdropped

446 6.0.5 Attack Intrusion Detection

ERROR 551 FTP: PASV response spoofdropped

446 6.2.0 Attack Intrusion Detection

ERROR 551 FTP: PASV response spoofdropped

448 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: Output buffesmall

448 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: Output buffesmall

448 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: Output buffesmall

449 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: Cannot allocmemory

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 44

limit any

limit any

limit any

in

in

in

s store this

s store this

s store this

S#12

S#12

S#12

ID does ecurity

ID does ecurity

ID does ecurity

e key

e key

449 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: Cannot allocmemory

449 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: Cannot allocmemory

450 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: Reached thefor local certs, cant loadmore

450 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: Reached thefor local certs, cant loadmore

450 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: Reached thefor local certs, cant loadmore

451 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: Import failed

451 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: Import failed

451 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: Import failed

452 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: Incorrect admpassword

452 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: Incorrect admpassword

452 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: Incorrect admpassword

453 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: CA certificateexceeded. Cannot verify Local Certificate

453 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: CA certificateexceeded. Cannot verify Local Certificate

453 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: CA certificateexceeded. Cannot verify Local Certificate

454 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: Improper fileformat. Please select PKC(*.p12) file

454 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: Improper fileformat. Please select PKC(*.p12) file

454 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: Improper fileformat. Please select PKC(*.p12) file

455 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: Certificate's not match this Network SAppliance

455 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: Certificate's not match this Network SAppliance

455 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: Certificate's not match this Network SAppliance

456 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: public-privatmismatch

456 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: public-privatmismatch

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 45

e key

al

al

al

al

al

al

cates

cates

cates

r

r

r

emory

emory

emory

te

te

te

te

te

te

te

te

te

te or a as

456 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: public-privatmismatch

457 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: Duplicate loccertificate name

457 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: Duplicate loccertificate name

457 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: Duplicate loccertificate name

458 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: Duplicate loccertificate

458 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: Duplicate loccertificate

458 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: Duplicate loccertificate

459 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: No CA certifiyet loaded

459 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: No CA certifiyet loaded

459 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: No CA certifiyet loaded

460 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: Internal erro

460 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: Internal erro

460 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: Internal erro

461 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: Temporary mshortage, try again

461 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: Temporary mshortage, try again

461 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: Temporary mshortage, try again

462 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: The certificachain is circular

462 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: The certificachain is circular

462 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: The certificachain is circular

463 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: The certificachain is incomplete

463 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: The certificachain is incomplete

463 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: The certificachain is incomplete

464 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: The certificachain has no root

464 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: The certificachain has no root

464 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: The certificachain has no root

465 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: The certificacertificate in the chain hexpired

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 46

te or a as

te or a as

te or a as a ure

te or a as a ure

te or a as a ure

te or a

te or a

te or a

te or a as a

te or a as a

te or a as a

ould

ould

ould

verify

verify

verify

from

from

465 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: The certificacertificate in the chain hexpired

465 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: The certificacertificate in the chain hexpired

466 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: The certificacertificate in the chain hvalidity period in the fut

466 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: The certificacertificate in the chain hvalidity period in the fut

466 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: The certificacertificate in the chain hvalidity period in the fut

467 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: The certificacertificate in the chain iscorrupt

467 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: The certificacertificate in the chain iscorrupt

467 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: The certificacertificate in the chain iscorrupt

468 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: The certificacertificate in the chain hbad signature

468 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: The certificacertificate in the chain hbad signature

468 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: The certificacertificate in the chain hbad signature

469 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: Loaded but cnot verify certificate

469 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: Loaded but cnot verify certificate

469 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: Loaded but cnot verify certificate

470 5.9.0 Maintenance VPN PKI ERROR --- PKI Failure: Loaded the certificate but could notits chain

470 6.0.5 Maintenance VPN PKI ERROR --- PKI Failure: Loaded the certificate but could notits chain

470 6.2.0 Maintenance VPN PKI ERROR --- PKI Failure: Loaded the certificate but could notits chain

473 5.9.0 Debug DHCP Relay INFO --- DHCP REQUEST received remote device

473 6.0.5 Debug DHCP Relay INFO --- DHCP REQUEST received remote device

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 47

from

from

from

from

m

m

m

ddress d me

ddress d me

ddress d me

etwork ill

etwork ill

etwork ill

ase nflicts t IP

ase nflicts t IP

ase nflicts t IP

473 6.2.0 Debug DHCP Relay INFO --- DHCP REQUEST received remote device

474 5.9.0 Debug DHCP Relay INFO --- DHCP DISCOVER receivedremote device

474 6.0.5 Debug DHCP Relay INFO --- DHCP DISCOVER receivedremote device

474 6.2.0 Debug DHCP Relay INFO --- DHCP DISCOVER receivedremote device

476 5.9.0 Debug DHCP Relay INFO --- DHCP OFFER received froserver

476 6.0.5 Debug DHCP Relay INFO --- DHCP OFFER received froserver

476 6.2.0 Debug DHCP Relay INFO --- DHCP OFFER received froserver

477 5.9.0 Debug DHCP Relay INFO --- DHCP NACK received fromserver

477 6.0.5 Debug DHCP Relay INFO --- DHCP NACK received fromserver

477 6.2.0 Debug DHCP Relay INFO --- DHCP NACK received fromserver

481 5.9.0 Maintenance PPP Dial-Up INFO --- PPP Dial-Up: No peer IP afrom Dial-Up ISP, local anremote IPs will be the sa

481 6.0.5 Maintenance PPP Dial-Up INFO --- PPP Dial-Up: No peer IP afrom Dial-Up ISP, local anremote IPs will be the sa

481 6.2.0 Maintenance PPP Dial-Up INFO --- PPP Dial-Up: No peer IP afrom Dial-Up ISP, local anremote IPs will be the sa

482 5.9.0 Maintenance Security Services WARNING 552 Received AV Alert: Your NAnti-Virus subscRIPtion wexpire in 7 days. %s

482 6.0.5 Maintenance Security Services WARNING 552 Received AV Alert: Your NAnti-Virus subscRIPtion wexpire in 7 days. %s

482 6.2.0 Maintenance Security Services WARNING 552 Received AV Alert: Your NAnti-Virus subscRIPtion wexpire in 7 days. %s

483 5.9.0 User Activity VPN IPsec WARNING --- Received notify: INVALID_ID_INFO

483 6.0.5 User Activity VPN IPsec WARNING --- Received notify: INVALID_ID_INFO

483 6.2.0 User Activity VPN IPsec WARNING --- Received notify: INVALID_ID_INFO

484 5.9.0 Maintenance DHCP Relay WARNING --- DHCP lease dropped. Lefrom Central Gateway cowith Remote Managemen

484 6.0.5 Maintenance DHCP Relay WARNING --- DHCP lease dropped. Lefrom Central Gateway cowith Remote Managemen

484 6.2.0 Maintenance DHCP Relay WARNING --- DHCP lease dropped. Lefrom Central Gateway cowith Remote Managemen

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 48

has no e

has no e

has no e

check

check

check

Ption

Ption

Ption

Ption

Ption

Ption

rt:

n 7

rt:

n 7

rt:

n 7

rt:

.

rt:

.

rt:

.

486 5.9.0 User Activity Authenticated Access

INFO --- User login denied - User privileges for guest servic

486 6.0.5 User Activity Authenticated Access

INFO --- User login denied - User privileges for guest servic

486 6.2.0 User Activity Authenticated Access

INFO --- User login denied - User privileges for guest servic

488 5.9.0 TCP | UDP | ICMP

Network Access WARNING --- Packet dropped by guest

488 6.0.5 TCP | UDP | ICMP

Network Access WARNING --- Packet dropped by guest

488 6.2.0 TCP | UDP | ICMP

Network Access WARNING --- Packet dropped by guest

489 5.9.0 Maintenance Security Services WARNING 562 Received CFS Alert: Your Content Filtering subscRIwill expire in 7 days.

489 6.0.5 Maintenance Security Services WARNING 562 Received CFS Alert: Your Content Filtering subscRIwill expire in 7 days.

489 6.2.0 Maintenance Security Services WARNING 562 Received CFS Alert: Your Content Filtering subscRIwill expire in 7 days.

490 5.9.0 Maintenance Security Services WARNING 563 Received CFS Alert: Your Content Filtering subscRIhas expired.

490 6.0.5 Maintenance Security Services WARNING 563 Received CFS Alert: Your Content Filtering subscRIhas expired.

490 6.2.0 Maintenance Security Services WARNING 563 Received CFS Alert: Your Content Filtering subscRIhas expired.

491 5.9.0 Maintenance Security Services WARNING 564 Received E-Mail Filter AleYour E-Mail Filtering subscRIPtion will expire idays.

491 6.0.5 Maintenance Security Services WARNING 564 Received E-Mail Filter AleYour E-Mail Filtering subscRIPtion will expire idays.

491 6.2.0 Maintenance Security Services WARNING 564 Received E-Mail Filter AleYour E-Mail Filtering subscRIPtion will expire idays.

492 5.9.0 Maintenance Security Services WARNING 565 Received E-Mail Filter AleYour E-Mail Filtering subscRIPtion has expired

492 6.0.5 Maintenance Security Services WARNING 565 Received E-Mail Filter AleYour E-Mail Filtering subscRIPtion has expired

492 6.2.0 Maintenance Security Services WARNING 565 Received E-Mail Filter AleYour E-Mail Filtering subscRIPtion has expired

493 5.9.0 Maintenance Firewall Event INFO --- ISDN Driver Firmware successfully updated

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 49

nied.

nied.

nied.

ed, ing tions.

ed, ing tions.

ed, ing tions.

lient

lient

lient

rator

rator

rator

rator

rator

rator

strator

strator

493 6.0.5 Maintenance Firewall Event INFO --- ISDN Driver Firmware successfully updated

493 6.2.0 Maintenance Firewall Event INFO --- ISDN Driver Firmware successfully updated

494 5.9.0 System Error VPN Client INFO 658 Global VPN Client LicenseExceeded: Connection de

494 6.0.5 System Error VPN Client INFO 658 Global VPN Client LicenseExceeded: Connection de

494 6.2.0 System Error VPN Client INFO 658 Global VPN Client LicenseExceeded: Connection de

496 5.9.0 Maintenance Security Services WARNING --- Registration Update NeedPlease restore your existsecurity service subscRIP

496 6.0.5 Maintenance Security Services WARNING --- Registration Update NeedPlease restore your existsecurity service subscRIP

496 6.2.0 Maintenance Security Services WARNING --- Registration Update NeedPlease restore your existsecurity service subscRIP

502 5.9.0 Maintenance Firewall Event INFO --- WAN not ready

502 6.0.5 Maintenance Firewall Event INFO --- WAN not ready

502 6.2.0 Maintenance Firewall Event INFO --- WAN not ready

505 5.9.0 System Error VPN Client ERROR 660 Blocked Quick Mode for Cusing Default KeyId

505 6.0.5 System Error VPN Client ERROR 660 Blocked Quick Mode for Cusing Default KeyId

505 6.2.0 System Error VPN Client ERROR 660 Blocked Quick Mode for Cusing Default KeyId

506 5.9.0 Maintenance Authenticated Access

INFO --- VPN disabled by administ

506 6.0.5 Maintenance Authenticated Access

INFO --- VPN disabled by administ

506 6.2.0 Maintenance Authenticated Access

INFO --- VPN disabled by administ

507 5.9.0 Maintenance Authenticated Access

INFO --- VPN enabled by administ

507 6.0.5 Maintenance Authenticated Access

INFO --- VPN enabled by administ

507 6.2.0 Maintenance Authenticated Access

INFO --- VPN enabled by administ

508 5.9.0 Maintenance Authenticated Access

INFO --- WLAN disabled by admini

508 6.0.5 Maintenance Authenticated Access

INFO --- WLAN disabled by admini

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 50

strator

strator

strator

strator

out

out

out

ce

ce

ce

IP

IP

IP

match

match

match

ped

ped

ped

t

t

t

508 6.2.0 Maintenance Authenticated Access

INFO --- WLAN disabled by admini

509 5.9.0 Maintenance Authenticated Access

INFO --- WLAN enabled by admini

509 6.0.5 Maintenance Authenticated Access

INFO --- WLAN enabled by admini

509 6.2.0 Maintenance Authenticated Access

INFO --- WLAN enabled by admini

518 5.9.0 802.11b Management

Wireless INFO --- 802.11 Management

518 6.0.5 802.11b Management

Wireless INFO --- 802.11 Management

518 6.2.0 802.11b Management

Wireless INFO --- 802.11 Management

520 5.9.0 User Activity Authenticated Access

INFO --- CLI administrator logged

520 6.0.5 User Activity Authenticated Access

INFO --- CLI administrator logged

520 6.2.0 User Activity Authenticated Access

INFO --- CLI administrator logged

521 5.9.0 Maintenance Firewall Event INFO --- Network Security Applianinitializing

521 6.0.5 Maintenance Firewall Event INFO --- Network Security Applianinitializing

521 6.2.0 Maintenance Firewall Event INFO --- Network Security Applianinitializing

522 5.9.0 Debug Network Access ALERT 554 Malformed or unhandled packet dropped

522 6.0.5 Debug Network Access ALERT 554 Malformed or unhandled packet dropped

522 6.2.0 Debug Network Access ALERT 554 Malformed or unhandled packet dropped

523 5.9.0 ICMP Network Access NOTICE --- ICMP packet dropped no

523 6.0.5 ICMP Network Access NOTICE --- ICMP packet dropped no

523 6.2.0 ICMP Network Access NOTICE --- ICMP packet dropped no

524 5.9.0 TCP Network Access NOTICE --- Web access Request drop

524 6.0.5 TCP Network Access NOTICE --- Web access Request drop

524 6.2.0 TCP Network Access NOTICE --- Web access Request drop

526 5.9.0 User Activity Network Access NOTICE --- Web management requesallowed

526 6.0.5 User Activity Network Access NOTICE --- Web management requesallowed

526 6.2.0 User Activity Network Access NOTICE --- Web management requesallowed

527 5.9.0 Attack Intrusion Detection

ALERT 555 FTP: PORT bounce attackdropped.

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 51

ce

ce

ce

tion is not

tion is not

tion is not

ed

ed

ed

d

d

d

ed;

ed;

ed;

m non

527 6.0.5 Attack Intrusion Detection

ALERT 555 FTP: PORT bounce attackdropped.

527 6.2.0 Attack Intrusion Detection

ALERT 555 FTP: PORT bounce attackdropped.

528 5.9.0 Attack Intrusion Detection

ALERT 556 FTP: PASV response bounattack dropped.

528 6.0.5 Attack Intrusion Detection

ALERT 556 FTP: PASV response bounattack dropped.

528 6.2.0 Attack Intrusion Detection

ALERT 556 FTP: PASV response bounattack dropped.

529 5.9.0 System Error VPN Client INFO 643 Global VPN Client connecnot allowed. Appliance isregistered.

529 6.0.5 System Error VPN Client INFO 643 Global VPN Client connecnot allowed. Appliance isregistered.

529 6.2.0 System Error VPN Client INFO 643 Global VPN Client connecnot allowed. Appliance isregistered.

533 5.9.0 TCP | UDP | ICMP

VPN IPsec NOTICE --- IPsec (ESP) packet dropp

533 6.0.5 TCP | UDP | ICMP

VPN IPsec NOTICE --- IPsec (ESP) packet dropp

533 6.2.0 TCP | UDP | ICMP

VPN IPsec NOTICE --- IPsec (ESP) packet dropp

534 5.9.0 TCP | UDP | ICMP

VPN IPsec NOTICE --- IPsec (AH) packet droppe

534 6.0.5 TCP | UDP | ICMP

VPN IPsec NOTICE --- IPsec (AH) packet droppe

534 6.2.0 TCP | UDP | ICMP

VPN IPsec NOTICE --- IPsec (AH) packet droppe

535 5.9.0 Debug VPN IPsec DEBUG --- IPsec (ESP) packet droppwaiting for pending IPsecconnection

535 6.0.5 Debug VPN IPsec DEBUG --- IPsec (ESP) packet droppwaiting for pending IPsecconnection

535 6.2.0 Debug VPN IPsec DEBUG --- IPsec (ESP) packet droppwaiting for pending IPsecconnection

537 5.9.0 Connection Traffic

Network Traffic INFO --- Connection Closed

537 6.0.5 Connection Traffic

Network Traffic INFO --- Connection Closed

537 6.2.0 Connection Traffic

Network Traffic INFO --- Connection Closed

538 5.9.0 Attack Network Access ALERT 557 FTP: Data connection frodefault port dropped

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 52

m non

m non

sion

sion

sion

dary

dary

dary

nnel

und to

nnel

und to

nnel

und to

tunnel

und to

tunnel

und to

tunnel

und to

t

t

t

LAN

LAN

LAN

538 6.0.5 Attack Network Access ALERT 557 FTP: Data connection frodefault port dropped

538 6.2.0 Attack Network Access ALERT 557 FTP: Data connection frodefault port dropped

542 5.9.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Previous seswas connected for %s

542 6.0.5 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Previous seswas connected for %s

542 6.2.0 User Activity PPP Dial-Up INFO --- PPP Dial-Up: Previous seswas connected for %s

543 5.9.0 User Activity VPN IKE INFO --- IKE Initiator: Using secongateway to negotiate

543 6.0.5 User Activity VPN IKE INFO --- IKE Initiator: Using secongateway to negotiate

543 6.2.0 User Activity VPN IKE INFO --- IKE Initiator: Using secongateway to negotiate

544 5.9.0 User Activity VPN IKE INFO --- IKE Initiator drop: VPN tuend point does not matchconfigured VPN Policy Boscope

544 6.0.5 User Activity VPN IKE INFO --- IKE Initiator drop: VPN tuend point does not matchconfigured VPN Policy Boscope

544 6.2.0 User Activity VPN IKE INFO --- IKE Initiator drop: VPN tuend point does not matchconfigured VPN Policy Boscope

545 5.9.0 User Activity VPN IKE INFO --- IKE Responder drop: VPNend point does not matchconfigured VPN Policy Boscope

545 6.0.5 User Activity VPN IKE INFO --- IKE Responder drop: VPNend point does not matchconfigured VPN Policy Boscope

545 6.2.0 User Activity VPN IKE INFO --- IKE Responder drop: VPNend point does not matchconfigured VPN Policy Boscope

546 5.9.0 WLAN IDS WLAN IDS ALERT 901 Found Rogue Access Poin

546 6.0.5 WLAN IDS WLAN IDS ALERT 901 Found Rogue Access Poin

546 6.2.0 WLAN IDS WLAN IDS ALERT 901 Found Rogue Access Poin

548 5.9.0 WLAN IDS WLAN IDS ALERT 903 Association Flood from Wstation

548 6.0.5 WLAN IDS WLAN IDS ALERT 903 Association Flood from Wstation

548 6.2.0 WLAN IDS WLAN IDS ALERT 903 Association Flood from Wstation

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 53

service

service

service

t '%s' is try

t '%s' is try

t '%s' is try

d

d

d

d

d

d

d

d

d

549 5.9.0 User Activity Authenticated Access

INFO --- User login failed - Guest limit reached

549 6.0.5 User Activity Authenticated Access

INFO --- User login failed - Guest limit reached

549 6.2.0 User Activity Authenticated Access

INFO --- User login failed - Guest limit reached

550 5.9.0 User Activity Authenticated Access

INFO --- Guest Session Timeout

550 6.0.5 User Activity Authenticated Access

INFO --- Guest Session Timeout

550 6.2.0 User Activity Authenticated Access

INFO --- Guest Session Timeout

551 5.9.0 User Activity Authenticated Access

INFO --- Guest Account Timeout

551 6.0.5 User Activity Authenticated Access

INFO --- Guest Account Timeout

551 6.2.0 User Activity Authenticated Access

INFO --- Guest Account Timeout

557 5.9.0 User Activity Authenticated Access

INFO --- Guest login denied. Guesalready logged in. Pleaseagain later.

557 6.0.5 User Activity Authenticated Access

INFO --- Guest login denied. Guesalready logged in. Pleaseagain later.

557 6.2.0 User Activity Authenticated Access

INFO --- Guest login denied. Guesalready logged in. Pleaseagain later.

558 5.9.0 User Activity Authenticated Access

INFO --- Guest account '%s' create

558 6.0.5 User Activity Authenticated Access

INFO --- Guest account '%s' create

558 6.2.0 User Activity Authenticated Access

INFO --- Guest account '%s' create

559 5.9.0 User Activity Authenticated Access

INFO --- Guest account '%s' delete

559 6.0.5 User Activity Authenticated Access

INFO --- Guest account '%s' delete

559 6.2.0 User Activity Authenticated Access

INFO --- Guest account '%s' delete

560 5.9.0 User Activity Authenticated Access

INFO --- Guest account '%s' disable

560 6.0.5 User Activity Authenticated Access

INFO --- Guest account '%s' disable

560 6.2.0 User Activity Authenticated Access

INFO --- Guest account '%s' disable

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 54

bled

bled

bled

erated

erated

erated

%s

%s

%s

s

s

s

561 5.9.0 User Activity Authenticated Access

INFO --- Guest account '%s' re-ena

561 6.0.5 User Activity Authenticated Access

INFO --- Guest account '%s' re-ena

561 6.2.0 User Activity Authenticated Access

INFO --- Guest account '%s' re-ena

562 5.9.0 User Activity Authenticated Access

INFO --- Guest account '%s' pruned

562 6.0.5 User Activity Authenticated Access

INFO --- Guest account '%s' pruned

562 6.2.0 User Activity Authenticated Access

INFO --- Guest account '%s' pruned

563 5.9.0 User Activity Authenticated Access

INFO --- Guest account '%s' re-gen

563 6.0.5 User Activity Authenticated Access

INFO --- Guest account '%s' re-gen

563 6.2.0 User Activity Authenticated Access

INFO --- Guest account '%s' re-gen

564 5.9.0 User Activity Authenticated Access

INFO --- Guest Idle Timeout

564 6.0.5 User Activity Authenticated Access

INFO --- Guest Idle Timeout

564 6.2.0 User Activity Authenticated Access

INFO --- Guest Idle Timeout

565 5.9.0 System Error Firewall Event ALERT 646 Interface %s Link Is Up

565 6.0.5 System Error Firewall Event ALERT 646 Interface %s Link Is Up

565 6.2.0 System Error Firewall Event ALERT 646 Interface %s Link Is Up

566 5.9.0 System Error Firewall Event ALERT 647 Interface %s Link Is Down

566 6.0.5 System Error Firewall Event ALERT 647 Interface %s Link Is Down

566 6.2.0 System Error Firewall Event ALERT 647 Interface %s Link Is Down

567 5.9.0 Maintenance Firewall Event INFO --- Interface IP Assignment changed: Shutting down

567 6.0.5 Maintenance Firewall Event INFO --- Interface IP Assignment changed: Shutting down

567 6.2.0 Maintenance Firewall Event INFO --- Interface IP Assignment changed: Shutting down

568 5.9.0 Maintenance Firewall Event INFO --- Interface IP Assignment :Binding and initializing %

568 6.0.5 Maintenance Firewall Event INFO --- Interface IP Assignment :Binding and initializing %

568 6.2.0 Maintenance Firewall Event INFO --- Interface IP Assignment :Binding and initializing %

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 55

erface.

erface.

erface.

%s to ion

%s to ion

%s to ion

o large lash

o large lash

o large lash

e been ues

e been ues

e been ues

569 5.9.0 Maintenance Firewall Event INFO --- Network for interface %soverlaps with another int

569 6.0.5 Maintenance Firewall Event INFO --- Network for interface %soverlaps with another int

569 6.2.0 Maintenance Firewall Event INFO --- Network for interface %soverlaps with another int

570 5.9.0 Maintenance Firewall Event INFO --- Please connect interfaceanother network to functproperly

570 6.0.5 Maintenance Firewall Event INFO --- Please connect interfaceanother network to functproperly

570 6.2.0 Maintenance Firewall Event INFO --- Please connect interfaceanother network to functproperly

573 5.9.0 System Error Firewall Event WARNING 649 The preferences file is toto be saved in available fmemory

573 6.0.5 System Error Firewall Event WARNING 649 The preferences file is toto be saved in available fmemory

573 6.2.0 System Error Firewall Event WARNING 649 The preferences file is toto be saved in available fmemory

574 5.9.0 System Error Firewall Event WARNING 650 All preference values havset to factory default val

574 6.0.5 System Error Firewall Event WARNING 650 All preference values havset to factory default val

574 6.2.0 System Error Firewall Event WARNING 650 All preference values havset to factory default val

575 5.9.0 System Environment

Firewall Hardware ERROR 101 Voltages Out of Tolerance

575 6.0.5 System Environment

Firewall Hardware ERROR 101 Voltages Out of Tolerance

575 6.2.0 System Environment

Firewall Hardware ERROR 101 Voltages Out of Tolerance

576 5.9.0 System Environment

Firewall Hardware ALERT 102 Fan Failure

576 6.0.5 System Environment

Firewall Hardware ALERT 102 Fan Failure

576 6.2.0 System Environment

Firewall Hardware ALERT 102 Fan Failure

577 5.9.0 System Environment

Firewall Hardware ALERT 103 Thermal Yellow

577 6.0.5 System Environment

Firewall Hardware ALERT 103 Thermal Yellow

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 56

ded

ded

ded

ped

ped

ped

eeded

eeded

eeded

%s

%s

%s

ilable

ilable

ilable

577 6.2.0 System Environment

Firewall Hardware ALERT 103 Thermal Yellow

578 5.9.0 System Environment

Firewall Hardware ALERT 104 Thermal Red

578 6.0.5 System Environment

Firewall Hardware ALERT 104 Thermal Red

578 6.2.0 System Environment

Firewall Hardware ALERT 104 Thermal Red

579 5.9.0 System Environment

Firewall Hardware ALERT 105 Thermal Red Timer Excee

579 6.0.5 System Environment

Firewall Hardware ALERT 105 Thermal Red Timer Excee

579 6.2.0 System Environment

Firewall Hardware ALERT 105 Thermal Red Timer Excee

580 5.9.0 Attack Network Access ALERT 558 TCP SYN/FIN packet drop

580 6.0.5 Attack Network Access ALERT 558 TCP SYN/FIN packet drop

580 6.2.0 Attack Network Access ALERT 558 TCP SYN/FIN packet drop

581 5.9.0 Maintenance WAN Failover WARNING --- WLB Spill-over started, configured threshold exc

581 6.0.5 Maintenance WAN Failover WARNING --- WLB Spill-over started, configured threshold exc

581 6.2.0 Maintenance WAN Failover WARNING --- WLB Spill-over started, configured threshold exc

582 5.9.0 Maintenance WAN Failover WARNING --- WLB Spill-over stopped

582 6.0.5 Maintenance WAN Failover WARNING --- WLB Spill-over stopped

582 6.2.0 Maintenance WAN Failover WARNING --- WLB Spill-over stopped

583 5.9.0 Attack Authenticated Access

ERROR 559 User login disabled from

583 6.0.5 Attack Authenticated Access

ERROR 559 User login disabled from

583 6.2.0 Attack Authenticated Access

ERROR 559 User login disabled from

584 5.9.0 System Error WAN Failover ALERT 651 WLB Failover in progress

584 6.0.5 System Error WAN Failover ALERT 651 WLB Failover in progress

584 6.2.0 System Error WAN Failover ALERT 651 WLB Failover in progress

585 5.9.0 System Error WAN Failover ALERT 653 WLB Resource is now ava

585 6.0.5 System Error WAN Failover ALERT 653 WLB Resource is now ava

585 6.2.0 System Error WAN Failover ALERT 653 WLB Resource is now ava

586 5.9.0 System Error WAN Failover ALERT 654 WLB Resource failed

586 6.0.5 System Error WAN Failover ALERT 654 WLB Resource failed

586 6.2.0 System Error WAN Failover ALERT 654 WLB Resource failed

587 5.9.0 User Activity VPN IKE WARNING --- Header verification failed

587 6.0.5 User Activity VPN IKE WARNING --- Header verification failed

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 57

ket has

ket has

ket has

t for

t for

t for

d

d

d

d dial dial-up

d dial dial-up

d dial dial-up

-dialed

-dialed

-dialed

covery

covery

covery

covery

covery

covery

587 6.2.0 User Activity VPN IKE WARNING --- Header verification failed

588 5.9.0 Maintenance DHCP Client INFO --- Received DHCP offer pacerrors

588 6.0.5 Maintenance DHCP Client INFO --- Received DHCP offer pacerrors

588 6.2.0 Maintenance DHCP Client INFO --- Received DHCP offer pacerrors

589 5.9.0 Maintenance DHCP Client INFO --- Received response packeDHCP request has errors

589 6.0.5 Maintenance DHCP Client INFO --- Received response packeDHCP request has errors

589 6.2.0 Maintenance DHCP Client INFO --- Received response packeDHCP request has errors

590 5.9.0 LAN UDP | LAN TCP

Network Access NOTICE --- IP type %s packet droppe

590 6.0.5 LAN UDP | LAN TCP

Network Access NOTICE --- IP type %s packet droppe

590 6.2.0 LAN UDP | LAN TCP

Network Access NOTICE --- IP type %s packet droppe

591 5.9.0 Attack PPP Dial-Up ERROR 566 Maximum sequential faileattempts (10) to a single number: %s

591 6.0.5 Attack PPP Dial-Up ERROR 566 Maximum sequential faileattempts (10) to a single number: %s

591 6.2.0 Attack PPP Dial-Up ERROR 566 Maximum sequential faileattempts (10) to a single number: %s

592 5.9.0 Attack PPP Dial-Up ERROR 567 Regulatory requirementsprohibit %s from being refor 30 minutes

592 6.0.5 Attack PPP Dial-Up ERROR 567 Regulatory requirementsprohibit %s from being refor 30 minutes

592 6.2.0 Attack PPP Dial-Up ERROR 567 Regulatory requirementsprohibit %s from being refor 30 minutes

593 5.9.0 Maintenance PPPoE INFO --- Received PPPoE Active DisOffer

593 6.0.5 Maintenance PPPoE INFO --- Received PPPoE Active DisOffer

593 6.2.0 Maintenance PPPoE INFO --- Received PPPoE Active DisOffer

594 5.9.0 Maintenance PPPoE INFO --- Received PPPoE Active DisSession_confirmation

594 6.0.5 Maintenance PPPoE INFO --- Received PPPoE Active DisSession_confirmation

594 6.2.0 Maintenance PPPoE INFO --- Received PPPoE Active DisSession_confirmation

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 58

covery

covery

covery

lowed

lowed

lowed

ess

ess

ess

cket in

cket in

cket in

acket

acket

acket

595 5.9.0 Maintenance PPPoE INFO --- Sending PPPoE Active DisRequest

595 6.0.5 Maintenance PPPoE INFO --- Sending PPPoE Active DisRequest

595 6.2.0 Maintenance PPPoE INFO --- Sending PPPoE Active DisRequest

596 5.9.0 Debug PPTP DEBUG --- PPTP decode failure

596 6.0.5 Debug PPTP DEBUG --- PPTP decode failure

596 6.2.0 Debug PPTP DEBUG --- PPTP decode failure

597 5.9.0 Debug Network Access INFO --- ICMP packet allowed

597 6.0.5 Debug Network Access INFO --- ICMP packet allowed

597 6.2.0 Debug Network Access INFO --- ICMP packet allowed

598 5.9.0 Debug Network Access INFO --- ICMP packet from LAN al

598 6.0.5 Debug Network Access INFO --- ICMP packet from LAN al

598 6.2.0 Debug Network Access INFO --- ICMP packet from LAN al

599 5.9.0 System Error Firewall Hardware ERROR 655 Diagnostic Code G

599 6.0.5 System Error Firewall Hardware ERROR 655 Diagnostic Code G

599 6.2.0 System Error Firewall Hardware ERROR 655 Diagnostic Code G

600 5.9.0 System Error Firewall Hardware ERROR 656 Diagnostic Code H

600 6.0.5 System Error Firewall Hardware ERROR 656 Diagnostic Code H

600 6.2.0 System Error Firewall Hardware ERROR 656 Diagnostic Code H

601 5.9.0 System Error Firewall Hardware ERROR 657 Diagnostic Code I

601 6.0.5 System Error Firewall Hardware ERROR 657 Diagnostic Code I

601 6.2.0 System Error Firewall Hardware ERROR 657 Diagnostic Code I

602 5.9.0 Debug Network Access INFO --- DNS packet allowed

602 6.0.5 Debug Network Access INFO --- DNS packet allowed

602 6.2.0 Debug Network Access INFO --- DNS packet allowed

603 5.9.0 System Error L2TP Server ERROR 661 Adding L2TP IP pool Addrobject Failed.

603 6.0.5 System Error L2TP Server ERROR 661 Adding L2TP IP pool Addrobject Failed.

603 6.2.0 System Error L2TP Server ERROR 661 Adding L2TP IP pool Addrobject Failed.

605 5.9.0 User Activity VPN IKE WARNING --- Received unencrypted pacrypto active state

605 6.0.5 User Activity VPN IKE WARNING --- Received unencrypted pacrypto active state

605 6.2.0 User Activity VPN IKE WARNING --- Received unencrypted pacrypto active state

606 5.9.0 Attack Intrusion Detection

ALERT 568 Spank attack multicast pdropped

606 6.0.5 Attack Intrusion Detection

ALERT 568 Spank attack multicast pdropped

606 6.2.0 Attack Intrusion Detection

ALERT 568 Spank attack multicast pdropped

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 59

t failed

t failed

t failed

) .

) .

) .

CP ase to

CP ase to

CP ase to

elayed

607 5.9.0 Debug | UDP VPN IKE INFO --- Received ISAKMP packet destined to port %s

607 6.0.5 Debug | UDP VPN IKE INFO --- Received ISAKMP packet destined to port %s

607 6.2.0 Debug | UDP VPN IKE INFO --- Received ISAKMP packet destined to port %s

608 5.9.0 Attack Intrusion Detection

ALERT 569 IPS Detection Alert: %s

608 6.0.5 Attack Intrusion Detection

ALERT 569 IPS Detection Alert: %s

608 6.2.0 Attack Intrusion Detection

ALERT 569 IPS Detection Alert: %s

609 5.9.0 Attack Intrusion Detection

ALERT 570 IPS Prevention Alert: %s

609 6.0.5 Attack Intrusion Detection

ALERT 570 IPS Prevention Alert: %s

609 6.2.0 Attack Intrusion Detection

ALERT 570 IPS Prevention Alert: %s

610 5.9.0 Maintenance Crypto Test ERROR --- Crypto Hardware AES tes

610 6.0.5 Maintenance Crypto Test ERROR --- Crypto Hardware AES tes

610 6.2.0 Maintenance Crypto Test ERROR --- Crypto Hardware AES tes

614 5.9.0 Maintenance Security Services WARNING 571 Received IPS Alert: Your Intrusion Prevention (IDPsubscRIPtion has expired

614 6.0.5 Maintenance Security Services WARNING 571 Received IPS Alert: Your Intrusion Prevention (IDPsubscRIPtion has expired

614 6.2.0 Maintenance Security Services WARNING 571 Received IPS Alert: Your Intrusion Prevention (IDPsubscRIPtion has expired

615 5.9.0 WLAN IDS WLAN IDS WARNING 904 WLAN client null probing

615 6.0.5 WLAN IDS WLAN IDS WARNING 904 WLAN client null probing

615 6.2.0 WLAN IDS WLAN IDS WARNING 904 WLAN client null probing

616 5.9.0 Debug VPN IKE ERROR --- Payload processing failed

616 6.0.5 Debug VPN IKE ERROR --- Payload processing failed

616 6.2.0 Debug VPN IKE ERROR --- Payload processing failed

617 5.9.0 Maintenance Wireless INFO --- WLAN not in AP mode, DHserver will not provide leclients on WLAN

617 6.0.5 Maintenance Wireless INFO --- WLAN not in AP mode, DHserver will not provide leclients on WLAN

617 6.2.0 Maintenance Wireless INFO --- WLAN not in AP mode, DHserver will not provide leclients on WLAN

618 5.9.0 Debug Bootp DEBUG --- BOOTP server response rto remote device

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 60

elayed

elayed

on LAN vice IP, remote

on LAN vice IP, remote

on LAN vice IP, remote

ocal

ocal

ocal

ect

ect

ect

firm

firm

firm

uest

uest

uest

ject

ject

ject

firm

firm

firm

eject

eject

eject

irm

618 6.0.5 Debug Bootp DEBUG --- BOOTP server response rto remote device

618 6.2.0 Debug Bootp DEBUG --- BOOTP server response rto remote device

619 5.9.0 Maintenance Bootp INFO --- BOOTP Client IP address conflicts with remote dedeleting IP address from table

619 6.0.5 Maintenance Bootp INFO --- BOOTP Client IP address conflicts with remote dedeleting IP address from table

619 6.2.0 Maintenance Bootp INFO --- BOOTP Client IP address conflicts with remote dedeleting IP address from table

620 5.9.0 Maintenance Bootp INFO --- BOOTP reply relayed to ldevice

620 6.0.5 Maintenance Bootp INFO --- BOOTP reply relayed to ldevice

620 6.2.0 Maintenance Bootp INFO --- BOOTP reply relayed to ldevice

622 5.9.0 VoIP VoIP INFO --- VoIP Call Connected

622 6.0.5 VoIP VoIP INFO --- VoIP Call Connected

622 6.2.0 VoIP VoIP INFO --- VoIP Call Connected

623 5.9.0 VoIP VoIP INFO --- VoIP Call Disconnected

623 6.0.5 VoIP VoIP INFO --- VoIP Call Disconnected

623 6.2.0 VoIP VoIP INFO --- VoIP Call Disconnected

624 5.9.0 VoIP VoIP DEBUG --- H.323/RAS Admission Rej

624 6.0.5 VoIP VoIP DEBUG --- H.323/RAS Admission Rej

624 6.2.0 VoIP VoIP DEBUG --- H.323/RAS Admission Rej

625 5.9.0 VoIP VoIP DEBUG --- H.323/RAS Admission Con

625 6.0.5 VoIP VoIP DEBUG --- H.323/RAS Admission Con

625 6.2.0 VoIP VoIP DEBUG --- H.323/RAS Admission Con

626 5.9.0 VoIP VoIP DEBUG --- H.323/RAS Admission Req

626 6.0.5 VoIP VoIP DEBUG --- H.323/RAS Admission Req

626 6.2.0 VoIP VoIP DEBUG --- H.323/RAS Admission Req

627 5.9.0 VoIP VoIP DEBUG --- H.323/RAS Bandwidth Re

627 6.0.5 VoIP VoIP DEBUG --- H.323/RAS Bandwidth Re

627 6.2.0 VoIP VoIP DEBUG --- H.323/RAS Bandwidth Re

628 5.9.0 VoIP VoIP DEBUG --- H.323/RAS Disengage Con

628 6.0.5 VoIP VoIP DEBUG --- H.323/RAS Disengage Con

628 6.2.0 VoIP VoIP DEBUG --- H.323/RAS Disengage Con

629 5.9.0 VoIP VoIP DEBUG --- H.323/RAS Gatekeeper R

629 6.0.5 VoIP VoIP DEBUG --- H.323/RAS Gatekeeper R

629 6.2.0 VoIP VoIP DEBUG --- H.323/RAS Gatekeeper R

630 5.9.0 VoIP VoIP DEBUG --- H.323/RAS Location Conf

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 61

irm

irm

ct

ct

ct

eject

eject

eject

d

d

d

ed - int

ed - int

ed - int

sage

sage

sage

ect

ect

ect

630 6.0.5 VoIP VoIP DEBUG --- H.323/RAS Location Conf

630 6.2.0 VoIP VoIP DEBUG --- H.323/RAS Location Conf

631 5.9.0 VoIP VoIP DEBUG --- H.323/RAS Location Reje

631 6.0.5 VoIP VoIP DEBUG --- H.323/RAS Location Reje

631 6.2.0 VoIP VoIP DEBUG --- H.323/RAS Location Reje

632 5.9.0 VoIP VoIP DEBUG --- H.323/RAS Registration R

632 6.0.5 VoIP VoIP DEBUG --- H.323/RAS Registration R

632 6.2.0 VoIP VoIP DEBUG --- H.323/RAS Registration R

633 5.9.0 VoIP VoIP DEBUG --- H.323/H.225 Setup

633 6.0.5 VoIP VoIP DEBUG --- H.323/H.225 Setup

633 6.2.0 VoIP VoIP DEBUG --- H.323/H.225 Setup

634 5.9.0 VoIP VoIP DEBUG --- H.323/H.225 Connect

634 6.0.5 VoIP VoIP DEBUG --- H.323/H.225 Connect

634 6.2.0 VoIP VoIP DEBUG --- H.323/H.225 Connect

635 5.9.0 VoIP VoIP DEBUG --- H.323/H.245 Address

635 6.0.5 VoIP VoIP DEBUG --- H.323/H.245 Address

635 6.2.0 VoIP VoIP DEBUG --- H.323/H.245 Address

636 5.9.0 VoIP VoIP DEBUG --- H.323/H.245 End Session

636 6.0.5 VoIP VoIP DEBUG --- H.323/H.245 End Session

636 6.2.0 VoIP VoIP DEBUG --- H.323/H.245 End Session

637 5.9.0 VoIP VoIP DEBUG --- VoIP %s Endpoint added

637 6.0.5 VoIP VoIP DEBUG --- VoIP %s Endpoint added

637 6.2.0 VoIP VoIP DEBUG --- VoIP %s Endpoint added

638 5.9.0 VoIP VoIP DEBUG --- VoIP %s Endpoint remove

638 6.0.5 VoIP VoIP DEBUG --- VoIP %s Endpoint remove

638 6.2.0 VoIP VoIP DEBUG --- VoIP %s Endpoint remove

639 5.9.0 VoIP VoIP WARNING --- VoIP %s Endpoint not addconfigured 'public' endpolimit reached

639 6.0.5 VoIP VoIP WARNING --- VoIP %s Endpoint not addconfigured 'public' endpolimit reached

639 6.2.0 VoIP VoIP WARNING --- VoIP %s Endpoint not addconfigured 'public' endpolimit reached

640 5.9.0 VoIP VoIP DEBUG --- H.323/RAS Unknown MesResponse

640 6.0.5 VoIP VoIP DEBUG --- H.323/RAS Unknown MesResponse

640 6.2.0 VoIP VoIP DEBUG --- H.323/RAS Unknown MesResponse

641 5.9.0 VoIP VoIP DEBUG --- H.323/RAS Disengage Rej

641 6.0.5 VoIP VoIP DEBUG --- H.323/RAS Disengage Rej

641 6.2.0 VoIP VoIP DEBUG --- H.323/RAS Disengage Rej

642 5.9.0 VoIP VoIP DEBUG --- H.323/RAS UnregistrationReject

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 62

ceeds tivity

ceeds tivity

ceeds tivity

ion dress

ion dress

ion dress

ion IP

ion IP

ion IP

VPN

VPN

VPN

rupt

rupt

rupt

642 6.0.5 VoIP VoIP DEBUG --- H.323/RAS UnregistrationReject

642 6.2.0 VoIP VoIP DEBUG --- H.323/RAS UnregistrationReject

643 5.9.0 VoIP VoIP DEBUG --- SIP Request

643 6.0.5 VoIP VoIP DEBUG --- SIP Request

643 6.2.0 VoIP VoIP DEBUG --- SIP Request

644 5.9.0 VoIP VoIP DEBUG --- SIP Response

644 6.0.5 VoIP VoIP DEBUG --- SIP Response

644 6.2.0 VoIP VoIP DEBUG --- SIP Response

645 5.9.0 VoIP VoIP WARNING --- SIP Register expiration exconfigured Signaling inactime out

645 6.0.5 VoIP VoIP WARNING --- SIP Register expiration exconfigured Signaling inactime out

645 6.2.0 VoIP VoIP WARNING --- SIP Register expiration exconfigured Signaling inactime out

646 5.9.0 System Error Firewall Event ALERT 5238 Packet dropped; connectlimit for this source IP adhas been reached

646 6.0.5 System Error Firewall Event ALERT 5238 Packet dropped; connectlimit for this source IP adhas been reached

646 6.2.0 System Error Firewall Event ALERT 5238 Packet dropped; connectlimit for this source IP adhas been reached

647 5.9.0 System Error Firewall Event ALERT 5239 Packet dropped; connectlimit for this destination address has been reached

647 6.0.5 System Error Firewall Event ALERT 5239 Packet dropped; connectlimit for this destination address has been reached

647 6.2.0 System Error Firewall Event ALERT 5239 Packet dropped; connectlimit for this destination address has been reached

648 5.9.0 Attack VPN IPsec ERROR 572 Packet destination not inAccess list

648 6.0.5 Attack VPN IPsec ERROR 572 Packet destination not inAccess list

648 6.2.0 Attack VPN IPsec ERROR 572 Packet destination not inAccess list

651 5.9.0 Debug IPComp DEBUG --- IPComp connection inter

651 6.0.5 Debug IPComp DEBUG --- IPComp connection inter

651 6.2.0 Debug IPComp DEBUG --- IPComp connection inter

652 5.9.0 TCP | UDP | ICMP

IPComp NOTICE --- IPComp packet dropped

652 6.0.5 TCP | UDP | ICMP

IPComp NOTICE --- IPComp packet dropped

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 63

waiting ection

waiting ection

waiting ection

nd

nd

nd

ed

ed

ed

eached

eached

eached

IKE ID

IKE ID

IKE ID

s P relay

s P relay

s P relay

652 6.2.0 TCP | UDP | ICMP

IPComp NOTICE --- IPComp packet dropped

653 5.9.0 Debug IPComp DEBUG --- IPComp packet dropped; for pending IPComp conn

653 6.0.5 Debug IPComp DEBUG --- IPComp packet dropped; for pending IPComp conn

653 6.2.0 Debug IPComp DEBUG --- IPComp packet dropped; for pending IPComp conn

654 5.9.0 System Error Firewall Logging CRITICAL --- Maximum events per secothreshold exceeded

654 6.0.5 System Error Firewall Logging CRITICAL --- Maximum events per secothreshold exceeded

654 6.2.0 System Error Firewall Logging CRITICAL --- Maximum events per secothreshold exceeded

655 5.9.0 System Error Firewall Logging CRITICAL --- Maximum Syslog data persecond threshold exceed

655 6.0.5 System Error Firewall Logging CRITICAL --- Maximum Syslog data persecond threshold exceed

655 6.2.0 System Error Firewall Logging CRITICAL --- Maximum Syslog data persecond threshold exceed

656 5.9.0 System Error Firewall Logging WARNING --- SMTP POP-Before-SMTP authentication failed

656 6.0.5 System Error Firewall Logging WARNING --- SMTP POP-Before-SMTP authentication failed

656 6.2.0 System Error Firewall Logging WARNING --- SMTP POP-Before-SMTP authentication failed

657 5.9.0 Maintenance Network INFO --- Syslog Server cannot be r

657 6.0.5 Maintenance Network INFO --- Syslog Server cannot be r

657 6.2.0 Maintenance Network INFO --- Syslog Server cannot be r

658 5.9.0 System Error VPN IKE WARNING --- IKE Responder: Proposed mismatch

658 6.0.5 System Error VPN IKE WARNING --- IKE Responder: Proposed mismatch

658 6.2.0 System Error VPN IKE WARNING --- IKE Responder: Proposed mismatch

659 5.9.0 System Error VPN Client ERROR --- IKE Responder: IP Addresalready exists in the DHCtable. Client traffic not allowed.

659 6.0.5 System Error VPN Client ERROR --- IKE Responder: IP Addresalready exists in the DHCtable. Client traffic not allowed.

659 6.2.0 System Error VPN Client ERROR --- IKE Responder: IP Addresalready exists in the DHCtable. Client traffic not allowed.

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 64

does tual

does tual

does tual

on-

on-

on-

llowed

llowed

llowed

d.

d.

d.

d

d

d

't

660 5.9.0 System Error VPN Client ERROR --- IKE Responder: %s Policy not allow static IP for VirAdapter.

660 6.0.5 System Error VPN Client ERROR --- IKE Responder: %s Policy not allow static IP for VirAdapter.

660 6.2.0 System Error VPN Client ERROR --- IKE Responder: %s Policy not allow static IP for VirAdapter.

661 5.9.0 User Activity VPN IKE ERROR --- Received notify: INVALID_PAYLOAD

661 6.0.5 User Activity VPN IKE ERROR --- Received notify: INVALID_PAYLOAD

661 6.2.0 User Activity VPN IKE ERROR --- Received notify: INVALID_PAYLOAD

662 5.9.0 Attack Intrusion Detection

ERROR 6434 Drop WLAN traffic from nSonicPoint devices

662 6.0.5 Attack Intrusion Detection

ERROR 6434 Drop WLAN traffic from nSonicPoint devices

662 6.2.0 Attack Intrusion Detection

ERROR 6434 Drop WLAN traffic from nSonicPoint devices

665 5.9.0 0 PPP Dial-Up INFO --- PPP Dial-Up: Dialing not aby schedule. %s

665 6.0.5 0 PPP Dial-Up INFO --- PPP Dial-Up: Dialing not aby schedule. %s

665 6.2.0 0 PPP Dial-Up INFO --- PPP Dial-Up: Dialing not aby schedule. %s

666 5.9.0 0 PPP Dial-Up INFO --- PPP Dial-Up: Connection disconnected as schedule

666 6.0.5 0 PPP Dial-Up INFO --- PPP Dial-Up: Connection disconnected as schedule

666 6.2.0 0 PPP Dial-Up INFO --- PPP Dial-Up: Connection disconnected as schedule

667 5.9.0 SonicPoint SonicPoint INFO --- SonicPoint Status

667 6.0.5 SonicPoint SonicPoint INFO --- SonicPoint Status

667 6.2.0 SonicPoint SonicPoint INFO --- SonicPoint Status

668 5.9.0 Maintenance High Availability INFO --- HA Peer Firewall Reboote

668 6.0.5 Maintenance High Availability INFO --- HA Peer Firewall Reboote

668 6.2.0 Maintenance High Availability INFO --- HA Peer Firewall Reboote

669 5.9.0 System Error High Availability ERROR 663 Error Rebooting HA Peer Firewall

669 6.0.5 System Error High Availability ERROR 663 Error Rebooting HA Peer Firewall

669 6.2.0 System Error High Availability ERROR 663 Error Rebooting HA Peer Firewall

670 5.9.0 System Error High Availability ERROR 664 License of HA pair doesnmatch: %s

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 65

't

't

signal

signal

signal

ot

ot

ot

e %s

e %s

e %s

%s

%s

%s

lticast

lticast

lticast

lticast

lticast

lticast

e

e

e

ong erface

670 6.0.5 System Error High Availability ERROR 664 License of HA pair doesnmatch: %s

670 6.2.0 System Error High Availability ERROR 664 License of HA pair doesnmatch: %s

671 5.9.0 System Error High Availability ERROR 665 Primary received reboot from Secondary

671 6.0.5 System Error High Availability ERROR 665 Primary received reboot from Secondary

671 6.2.0 System Error High Availability ERROR 665 Primary received reboot from Secondary

672 5.9.0 System Error High Availability ERROR 666 Secondary received rebosignal from Primary

672 6.0.5 System Error High Availability ERROR 666 Secondary received rebosignal from Primary

672 6.2.0 System Error High Availability ERROR 666 Secondary received rebosignal from Primary

674 5.9.0 System Error High Availability INFO --- Success to reach Interfacprobe

674 6.0.5 System Error High Availability INFO --- Success to reach Interfacprobe

674 6.2.0 System Error High Availability INFO --- Success to reach Interfacprobe

675 5.9.0 System Error High Availability ERROR 6234 Failure to reach Interfaceprobe

675 6.0.5 System Error High Availability ERROR 6234 Failure to reach Interfaceprobe

675 6.2.0 System Error High Availability ERROR 6234 Failure to reach Interfaceprobe

676 5.9.0 --- Multicast INFO --- IGMP V2 client joined muGroup : %s

676 6.0.5 --- Multicast INFO --- IGMP V2 client joined muGroup : %s

676 6.2.0 --- Multicast INFO --- IGMP V2 client joined muGroup : %s

677 5.9.0 --- Multicast INFO --- IGMP V3 client joined muGroup : %s

677 6.0.5 --- Multicast INFO --- IGMP V3 client joined muGroup : %s

677 6.2.0 --- Multicast INFO --- IGMP V3 client joined muGroup : %s

682 5.9.0 --- Multicast INFO --- IGMP Leave group messagReceived on interface %s

682 6.0.5 --- Multicast INFO --- IGMP Leave group messagReceived on interface %s

682 6.2.0 --- Multicast INFO --- IGMP Leave group messagReceived on interface %s

683 5.9.0 --- Multicast NOTICE --- IGMP packet dropped, wrchecksum received on int%s

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 66

ong erface

ong erface

pped,

pped,

pped,

pped,

pped,

pped,

cted

cted

cted

is

is

is

is

is

is

packet

packet

packet

packet

packet

683 6.0.5 --- Multicast NOTICE --- IGMP packet dropped, wrchecksum received on int%s

683 6.2.0 --- Multicast NOTICE --- IGMP packet dropped, wrchecksum received on int%s

690 5.9.0 --- Multicast NOTICE --- Multicast UDP packet drono state entry

690 6.0.5 --- Multicast NOTICE --- Multicast UDP packet drono state entry

690 6.2.0 --- Multicast NOTICE --- Multicast UDP packet drono state entry

694 5.9.0 --- Multicast WARNING --- Multicast UDP packet droRTP stateful failed

694 6.0.5 --- Multicast WARNING --- Multicast UDP packet droRTP stateful failed

694 6.2.0 --- Multicast WARNING --- Multicast UDP packet droRTP stateful failed

701 5.9.0 --- Multicast DEBUG --- IGMP querier Router deteon interface %s

701 6.0.5 --- Multicast DEBUG --- IGMP querier Router deteon interface %s

701 6.2.0 --- Multicast DEBUG --- IGMP querier Router deteon interface %s

706 5.9.0 --- Network Monitor ALERT 14005 Network Monitor: Host %soffline

706 6.0.5 --- Network Monitor ALERT 14005 Network Monitor: Host %soffline

706 6.2.0 --- Network Monitor ALERT 14005 Network Monitor: Host %soffline

707 5.9.0 --- Network Monitor ALERT 14006 Network Monitor: Host %sonline

707 6.0.5 --- Network Monitor ALERT 14006 Network Monitor: Host %sonline

707 6.2.0 --- Network Monitor ALERT 14006 Network Monitor: Host %sonline

708 5.9.0 Debug Network DEBUG --- TCP packet received withinvalid SEQ number; TCP dropped

708 6.0.5 Debug Network DEBUG --- TCP packet received withinvalid SEQ number; TCP dropped

708 6.2.0 Debug Network DEBUG --- TCP packet received withinvalid SEQ number; TCP dropped

709 5.9.0 Debug Network DEBUG --- TCP packet received withinvalid ACK number; TCPdropped

709 6.0.5 Debug Network DEBUG --- TCP packet received withinvalid ACK number; TCPdropped

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 67

packet

ceived;

ceived;

ceived;

eived;

eived;

eived;

d

d

d

t

t

t

st

st

st

ic to

ic to

ic to

ic to

709 6.2.0 Debug Network DEBUG --- TCP packet received withinvalid ACK number; TCPdropped

712 5.9.0 Debug Network DEBUG --- TCP connection reject reTCP connection dropped

712 6.0.5 Debug Network DEBUG --- TCP connection reject reTCP connection dropped

712 6.2.0 Debug Network DEBUG --- TCP connection reject reTCP connection dropped

713 5.9.0 Debug Network DEBUG --- TCP connection abort recTCP connection dropped

713 6.0.5 Debug Network DEBUG --- TCP connection abort recTCP connection dropped

713 6.2.0 Debug Network DEBUG --- TCP connection abort recTCP connection dropped

714 5.9.0 Debug Network Access NOTICE --- EIGRP packet dropped

714 6.0.5 Debug Network Access NOTICE --- EIGRP packet dropped

714 6.2.0 Debug Network Access NOTICE --- EIGRP packet dropped

719 5.9.0 System Error VPN ERROR --- VPN policy count receiveexceeds the limit; %s

719 6.0.5 System Error VPN ERROR --- VPN policy count receiveexceeds the limit; %s

719 6.2.0 System Error VPN ERROR --- VPN policy count receiveexceeds the limit; %s

720 5.9.0 Maintenance PPPoE INFO --- Sending LCP Echo Reques

720 6.0.5 Maintenance PPPoE INFO --- Sending LCP Echo Reques

720 6.2.0 Maintenance PPPoE INFO --- Sending LCP Echo Reques

721 5.9.0 Maintenance PPPoE INFO --- Received LCP Echo Reque

721 6.0.5 Maintenance PPPoE INFO --- Received LCP Echo Reque

721 6.2.0 Maintenance PPPoE INFO --- Received LCP Echo Reque

722 5.9.0 Maintenance PPPoE INFO --- Sending LCP Echo Reply

722 6.0.5 Maintenance PPPoE INFO --- Sending LCP Echo Reply

722 6.2.0 Maintenance PPPoE INFO --- Sending LCP Echo Reply

723 5.9.0 Maintenance PPPoE INFO --- Received LCP Echo Reply

723 6.0.5 Maintenance PPPoE INFO --- Received LCP Echo Reply

723 6.2.0 Maintenance PPPoE INFO --- Received LCP Echo Reply

724 5.9.0 --- Network Access INFO --- Guest Services drop traffdeny network

724 6.0.5 --- Network Access INFO --- Guest Services drop traffdeny network

724 6.2.0 --- Network Access INFO --- Guest Services drop traffdeny network

725 5.9.0 --- Network Access INFO --- Guest Services pass traffaccess allow network

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 68

ic to

ic to

ers

ers

ers

le

le

le

le

le

le

SSL

SSL

SSL

tion

tion

tion

725 6.0.5 --- Network Access INFO --- Guest Services pass traffaccess allow network

725 6.2.0 --- Network Access INFO --- Guest Services pass traffaccess allow network

726 5.9.0 --- Network Access INFO --- WLAN max concurrent usreached already

726 6.0.5 --- Network Access INFO --- WLAN max concurrent usreached already

726 6.2.0 --- Network Access INFO --- WLAN max concurrent usreached already

727 5.9.0 SonicPoint SonicPoint INFO --- SonicPoint Provision

727 6.0.5 SonicPoint SonicPoint INFO --- SonicPoint Provision

727 6.2.0 SonicPoint SonicPoint INFO --- SonicPoint Provision

728 5.9.0 Maintenance Authenticated Access

INFO --- WLAN disabled by schedu

728 6.0.5 Maintenance Authenticated Access

INFO --- WLAN disabled by schedu

728 6.2.0 Maintenance Authenticated Access

INFO --- WLAN disabled by schedu

729 5.9.0 Maintenance Authenticated Access

INFO --- WLAN enabled by schedu

729 6.0.5 Maintenance Authenticated Access

INFO --- WLAN enabled by schedu

729 6.2.0 Maintenance Authenticated Access

INFO --- WLAN enabled by schedu

732 5.9.0 TCP | UDP | ICMP

Wireless WARNING --- Packet dropped by WLANVPN enforcement check

732 6.0.5 TCP | UDP | ICMP

Wireless WARNING --- Packet dropped by WLANVPN enforcement check

732 6.2.0 TCP | UDP | ICMP

Wireless WARNING --- Packet dropped by WLANVPN enforcement check

733 5.9.0 Maintenance Wireless INFO --- SSL VPN enforcement

733 6.0.5 Maintenance Wireless INFO --- SSL VPN enforcement

733 6.2.0 Maintenance Wireless INFO --- SSL VPN enforcement

734 5.9.0 --- Firewall Event INFO --- Source IP address connecstatus: %s

734 6.0.5 --- Firewall Event INFO --- Source IP address connecstatus: %s

734 6.2.0 --- Firewall Event INFO --- Source IP address connecstatus: %s

735 5.9.0 --- Firewall Event INFO --- Destination IP address connection status: %s

735 6.0.5 --- Firewall Event INFO --- Destination IP address connection status: %s

735 6.2.0 --- Firewall Event INFO --- Destination IP address connection status: %s

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 69

lem:%s

lem:%s

lem:%s

ssion

ssion

ssion

S

S

S

server

server

server

server

server

server

d er

d er

d er

737 5.9.0 System Error Firewall Logging WARNING --- SMTP authentication prob

737 6.0.5 System Error Firewall Logging WARNING --- SMTP authentication prob

737 6.2.0 System Error Firewall Logging WARNING --- SMTP authentication prob

738 5.9.0 Maintenance PPPoE INFO --- PPPoE Client: Previous sewas connected for %s

738 6.0.5 Maintenance PPPoE INFO --- PPPoE Client: Previous sewas connected for %s

738 6.2.0 Maintenance PPPoE INFO --- PPPoE Client: Previous sewas connected for %s

744 5.9.0 User Activity RADIUS WARNING --- User login denied - RADIUcommunication problem

744 6.0.5 User Activity RADIUS WARNING --- User login denied - RADIUcommunication problem

744 6.2.0 User Activity RADIUS WARNING --- User login denied - RADIUcommunication problem

745 5.9.0 User Activity RADIUS INFO --- User login denied - LDAP authentication failure

745 6.0.5 User Activity RADIUS INFO --- User login denied - LDAP authentication failure

745 6.2.0 User Activity RADIUS INFO --- User login denied - LDAP authentication failure

746 5.9.0 User Activity RADIUS WARNING --- User login denied - LDAP Timeout

746 6.0.5 User Activity RADIUS WARNING --- User login denied - LDAP Timeout

746 6.2.0 User Activity RADIUS WARNING --- User login denied - LDAP Timeout

747 5.9.0 User Activity RADIUS WARNING --- User login denied - LDAP down or misconfigured

747 6.0.5 User Activity RADIUS WARNING --- User login denied - LDAP down or misconfigured

747 6.2.0 User Activity RADIUS WARNING --- User login denied - LDAP down or misconfigured

748 5.9.0 User Activity RADIUS WARNING --- User login denied - LDAP communication problem

748 6.0.5 User Activity RADIUS WARNING --- User login denied - LDAP communication problem

748 6.2.0 User Activity RADIUS WARNING --- User login denied - LDAP communication problem

749 5.9.0 User Activity RADIUS WARNING --- User login denied - invalicredentials on LDAP serv

749 6.0.5 User Activity RADIUS WARNING --- User login denied - invalicredentials on LDAP serv

749 6.2.0 User Activity RADIUS WARNING --- User login denied - invalicredentials on LDAP serv

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 70

icient

icient

icient

chema

chema

chema

ificate

ificate

ificate

server

server

server

S iled

S iled

S iled

server

server

server

r local

r local

r local

750 5.9.0 User Activity RADIUS WARNING --- User login denied - insuffaccess on LDAP server

750 6.0.5 User Activity RADIUS WARNING --- User login denied - insuffaccess on LDAP server

750 6.2.0 User Activity RADIUS WARNING --- User login denied - insuffaccess on LDAP server

751 5.9.0 User Activity RADIUS WARNING --- User login denied - LDAP smismatch

751 6.0.5 User Activity RADIUS WARNING --- User login denied - LDAP smismatch

751 6.2.0 User Activity RADIUS WARNING --- User login denied - LDAP smismatch

752 5.9.0 User Activity RADIUS WARNING --- Allowed LDAP server certwith wrong host name

752 6.0.5 User Activity RADIUS WARNING --- Allowed LDAP server certwith wrong host name

752 6.2.0 User Activity RADIUS WARNING --- Allowed LDAP server certwith wrong host name

753 5.9.0 User Activity RADIUS WARNING --- User login denied - LDAP name resolution failed

753 6.0.5 User Activity RADIUS WARNING --- User login denied - LDAP name resolution failed

753 6.2.0 User Activity RADIUS WARNING --- User login denied - LDAP name resolution failed

754 5.9.0 User Activity RADIUS WARNING --- User login denied - RADIUserver name resolution fa

754 6.0.5 User Activity RADIUS WARNING --- User login denied - RADIUserver name resolution fa

754 6.2.0 User Activity RADIUS WARNING --- User login denied - RADIUserver name resolution fa

755 5.9.0 User Activity RADIUS WARNING --- User login denied - LDAP certificate not valid

755 6.0.5 User Activity RADIUS WARNING --- User login denied - LDAP certificate not valid

755 6.2.0 User Activity RADIUS WARNING --- User login denied - LDAP certificate not valid

756 5.9.0 User Activity RADIUS WARNING --- User login denied - TLS ocertificate problem

756 6.0.5 User Activity RADIUS WARNING --- User login denied - TLS ocertificate problem

756 6.2.0 User Activity RADIUS WARNING --- User login denied - TLS ocertificate problem

757 5.9.0 User Activity RADIUS WARNING --- User login denied - LDAP directory mismatch

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 71

w

w

w

lready

lready

lready

n

n

n

out of icy

out of icy

out of icy

host

host

host

t

t

t

nse g

nse g

nse g

757 6.0.5 User Activity RADIUS WARNING --- User login denied - LDAP directory mismatch

757 6.2.0 User Activity RADIUS WARNING --- User login denied - LDAP directory mismatch

758 5.9.0 User Activity RADIUS WARNING --- LDAP server does not alloCHAP

758 6.0.5 User Activity RADIUS WARNING --- LDAP server does not alloCHAP

758 6.2.0 User Activity RADIUS WARNING --- LDAP server does not alloCHAP

759 5.9.0 User Activity Authenticated Access

INFO --- User login denied - user alogged in

759 6.0.5 User Activity Authenticated Access

INFO --- User login denied - user alogged in

759 6.2.0 User Activity Authenticated Access

INFO --- User login denied - user alogged in

760 5.9.0 --- Network Access NOTICE --- TCP handshake violation detected; TCP connectiodropped

760 6.0.5 --- Network Access NOTICE --- TCP handshake violation detected; TCP connectiodropped

760 6.2.0 --- Network Access NOTICE --- TCP handshake violation detected; TCP connectiodropped

761 5.9.0 Maintenance Security Services INFO --- Access attempt from hostcompliance with GSC Pol

761 6.0.5 Maintenance Security Services INFO --- Access attempt from hostcompliance with GSC Pol

761 6.2.0 Maintenance Security Services INFO --- Access attempt from hostcompliance with GSC Pol

762 5.9.0 Maintenance Security Services INFO --- GSC Policy out-of-date on

762 6.0.5 Maintenance Security Services INFO --- GSC Policy out-of-date on

762 6.2.0 Maintenance Security Services INFO --- GSC Policy out-of-date on

763 5.9.0 Maintenance Security Services INFO 8627 Access attempt from hoswithout GSC installed

763 6.0.5 Maintenance Security Services INFO 8627 Access attempt from hoswithout GSC installed

763 6.2.0 Maintenance Security Services INFO 8627 Access attempt from hoswithout GSC installed

766 5.9.0 Maintenance Security Services WARNING 8628 Failed to synchronize liceinformation with LicensinServer. %s

766 6.0.5 Maintenance Security Services WARNING 8628 Failed to synchronize liceinformation with LicensinServer. %s

766 6.2.0 Maintenance Security Services WARNING 8628 Failed to synchronize liceinformation with LicensinServer. %s

773 5.9.0 System Error DDNS ERROR --- DDNS Failure: Provider %s

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 72

s

s

s

domain

domain

domain

s

s

s

n

n

n

ed

ed

ed

bled

bled

bled

abled

abled

abled

on line

on line

on line

e been

e been

e been

tivated

tivated

tivated

ted

ted

ted

ted

ted

773 6.0.5 System Error DDNS ERROR --- DDNS Failure: Provider %s

773 6.2.0 System Error DDNS ERROR --- DDNS Failure: Provider %s

774 5.9.0 System Error DDNS ERROR --- DDNS Failure: Provider %

774 6.0.5 System Error DDNS ERROR --- DDNS Failure: Provider %

774 6.2.0 System Error DDNS ERROR --- DDNS Failure: Provider %

776 5.9.0 Maintenance DDNS INFO --- DDNS Update success for %s

776 6.0.5 Maintenance DDNS INFO --- DDNS Update success for %s

776 6.2.0 Maintenance DDNS INFO --- DDNS Update success for %s

777 5.9.0 System Error DDNS WARNING --- DDNS Warning: Provider %

777 6.0.5 System Error DDNS WARNING --- DDNS Warning: Provider %

777 6.2.0 System Error DDNS WARNING --- DDNS Warning: Provider %

778 5.9.0 Maintenance DDNS INFO --- DDNS association %s takeOffline locally

778 6.0.5 Maintenance DDNS INFO --- DDNS association %s takeOffline locally

778 6.2.0 Maintenance DDNS INFO --- DDNS association %s takeOffline locally

779 5.9.0 Maintenance DDNS INFO --- DDNS association %s add

779 6.0.5 Maintenance DDNS INFO --- DDNS association %s add

779 6.2.0 Maintenance DDNS INFO --- DDNS association %s add

780 5.9.0 Maintenance DDNS INFO --- DDNS association %s ena

780 6.0.5 Maintenance DDNS INFO --- DDNS association %s ena

780 6.2.0 Maintenance DDNS INFO --- DDNS association %s ena

781 5.9.0 Maintenance DDNS INFO --- DDNS association %s dis

781 6.0.5 Maintenance DDNS INFO --- DDNS association %s dis

781 6.2.0 Maintenance DDNS INFO --- DDNS association %s dis

782 5.9.0 Maintenance DDNS INFO --- DDNS Association %s put

782 6.0.5 Maintenance DDNS INFO --- DDNS Association %s put

782 6.2.0 Maintenance DDNS INFO --- DDNS Association %s put

783 5.9.0 Maintenance DDNS INFO --- All DDNS associations havdeleted

783 6.0.5 Maintenance DDNS INFO --- All DDNS associations havdeleted

783 6.2.0 Maintenance DDNS INFO --- All DDNS associations havdeleted

784 5.9.0 Maintenance DDNS INFO --- DDNS association %s deac

784 6.0.5 Maintenance DDNS INFO --- DDNS association %s deac

784 6.2.0 Maintenance DDNS INFO --- DDNS association %s deac

785 5.9.0 Maintenance DDNS INFO --- DDNS association %s dele

785 6.0.5 Maintenance DDNS INFO --- DDNS association %s dele

785 6.2.0 Maintenance DDNS INFO --- DDNS association %s dele

786 5.9.0 --- DDNS INFO --- DDNS association %s upda

786 6.0.5 --- DDNS INFO --- DDNS association %s upda

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 73

ted

t: %s

t: %s

t: %s

Alert:

Alert:

Alert:

lert:

lert:

lert:

ired

ired

ired

RBL-ed

RBL-ed

RBL-ed

786 6.2.0 --- DDNS INFO --- DDNS association %s upda

789 5.9.0 Attack Intrusion Detection

ALERT 6435 IPS Detection Alert: %s

789 6.0.5 Attack Intrusion Detection

ALERT 6435 IPS Detection Alert: %s

789 6.2.0 Attack Intrusion Detection

ALERT 6435 IPS Detection Alert: %s

790 5.9.0 Attack Intrusion Detection

ALERT 6436 IPS Prevention Alert: %s

790 6.0.5 Attack Intrusion Detection

ALERT 6436 IPS Prevention Alert: %s

790 6.2.0 Attack Intrusion Detection

ALERT 6436 IPS Prevention Alert: %s

791 5.9.0 --- DPI-SSL INFO --- DPI-SSL: %s

791 6.0.5 Network Access DPI-SSL INFO --- DPI-SSL: %s

791 6.2.0 --- DPI-SSL INFO --- DPI-SSL: %s

793 5.9.0 User Activity Application Firewall

ALERT 13201 Application Firewall Aler

793 6.0.5 User Activity Application Firewall

ALERT 13201 Application Firewall Aler

793 6.2.0 User Activity Application Firewall

ALERT 13201 Application Firewall Aler

794 5.9.0 Attack Intrusion Detection

ALERT 6437 Anti-Spyware Prevention %s

794 6.0.5 Attack Intrusion Detection

ALERT 6437 Anti-Spyware Prevention %s

794 6.2.0 Attack Intrusion Detection

ALERT 6437 Anti-Spyware Prevention %s

795 5.9.0 Attack Intrusion Detection

ALERT 6438 Anti-Spyware Detection A%s

795 6.0.5 Attack Intrusion Detection

ALERT 6438 Anti-Spyware Detection A%s

795 6.2.0 Attack Intrusion Detection

ALERT 6438 Anti-Spyware Detection A%s

796 5.9.0 Maintenance Security Services WARNING 8631 Anti-Spyware Service Exp

796 6.0.5 Maintenance Security Services WARNING 8631 Anti-Spyware Service Exp

796 6.2.0 Maintenance Security Services WARNING 8631 Anti-Spyware Service Exp

797 5.9.0 --- RBL NOTICE --- Outbound connection to listed SMTP server dropp

797 6.0.5 --- RBL NOTICE --- Outbound connection to listed SMTP server dropp

797 6.2.0 --- RBL NOTICE --- Outbound connection to listed SMTP server dropp

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 74

RBL-ed

RBL-ed

RBL-ed

L

L

L

fied for

fied for

fied for

t

t

t

rt

rt

rt

: %s

: %s

: %s

ce

ce

ce

IP al-Up -up

IP al-Up -up

IP al-Up -up

s

s

798 5.9.0 --- RBL NOTICE --- Inbound connection fromlisted SMTP server dropp

798 6.0.5 --- RBL NOTICE --- Inbound connection fromlisted SMTP server dropp

798 6.2.0 --- RBL NOTICE --- Inbound connection fromlisted SMTP server dropp

799 5.9.0 --- RBL NOTICE --- SMTP server found on RBblacklist

799 6.0.5 --- RBL NOTICE --- SMTP server found on RBblacklist

799 6.2.0 --- RBL NOTICE --- SMTP server found on RBblacklist

800 5.9.0 --- RBL ERROR --- No valid DNS server speciRBL lookups

800 6.0.5 --- RBL ERROR --- No valid DNS server speciRBL lookups

800 6.2.0 --- RBL ERROR --- No valid DNS server speciRBL lookups

805 5.9.0 --- GMS INFO --- Interface statistics repor

805 6.0.5 --- GMS INFO --- Interface statistics repor

805 6.2.0 --- GMS INFO --- Interface statistics repor

806 5.9.0 --- GMS INFO --- SonicPoint statistics repo

806 6.0.5 --- GMS INFO --- SonicPoint statistics repo

806 6.2.0 --- GMS INFO --- SonicPoint statistics repo

809 5.9.0 Attack Security Services ALERT 8632 Gateway Anti-Virus Alert

809 6.0.5 Attack Security Services ALERT 8632 Gateway Anti-Virus Alert

809 6.2.0 Attack Security Services ALERT 8632 Gateway Anti-Virus Alert

810 5.9.0 Maintenance Security Services WARNING 8633 Gateway Anti-Virus Serviexpired

810 6.0.5 Maintenance Security Services WARNING 8633 Gateway Anti-Virus Serviexpired

810 6.2.0 Maintenance Security Services WARNING 8633 Gateway Anti-Virus Serviexpired

811 5.9.0 Maintenance PPP Dial-Up INFO --- PPP Dial-Up: Invalid DNS address returned from DiISP; overriding using dialprofile settings

811 6.0.5 Maintenance PPP Dial-Up INFO --- PPP Dial-Up: Invalid DNS address returned from DiISP; overriding using dialprofile settings

811 6.2.0 Maintenance PPP Dial-Up INFO --- PPP Dial-Up: Invalid DNS address returned from DiISP; overriding using dialprofile settings

815 5.9.0 --- Network WARNING --- Too many gratuitous ARPdetected

815 6.0.5 --- Network WARNING --- Too many gratuitous ARPdetected

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 75

s

r out

r out

r out

out ing

out ing

out ing

ggered

ggered

ggered

ggered

ggered

ggered

uring out

uring out

uring out

out bound up

out bound up

815 6.2.0 --- Network WARNING --- Too many gratuitous ARPdetected

817 5.9.0 User Activity Authenticated Access

INFO --- Incoming call received foRemotely Triggered Dial-session

817 6.0.5 User Activity Authenticated Access

INFO --- Incoming call received foRemotely Triggered Dial-session

817 6.2.0 User Activity Authenticated Access

INFO --- Incoming call received foRemotely Triggered Dial-session

818 5.9.0 User Activity Authenticated Access

INFO --- Remotely Triggered Dial-session started. Requestauthentication

818 6.0.5 User Activity Authenticated Access

INFO --- Remotely Triggered Dial-session started. Requestauthentication

818 6.2.0 User Activity Authenticated Access

INFO --- Remotely Triggered Dial-session started. Requestauthentication

819 5.9.0 User Activity Authenticated Access

INFO --- Incorrect authentication received for Remotely TriDial-out

819 6.0.5 User Activity Authenticated Access

INFO --- Incorrect authentication received for Remotely TriDial-out

819 6.2.0 User Activity Authenticated Access

INFO --- Incorrect authentication received for Remotely TriDial-out

820 5.9.0 User Activity Authenticated Access

INFO --- Successful authenticationreceived for Remotely TriDial-out

820 6.0.5 User Activity Authenticated Access

INFO --- Successful authenticationreceived for Remotely TriDial-out

820 6.2.0 User Activity Authenticated Access

INFO --- Successful authenticationreceived for Remotely TriDial-out

821 5.9.0 User Activity Authenticated Access

INFO --- Authentication Timeout dRemotely Triggered Dial-session

821 6.0.5 User Activity Authenticated Access

INFO --- Authentication Timeout dRemotely Triggered Dial-session

821 6.2.0 User Activity Authenticated Access

INFO --- Authentication Timeout dRemotely Triggered Dial-session

822 5.9.0 User Activity Authenticated Access

INFO --- Remotely Triggered Dial-session ended. Valid WANdata found. Normal dial-sequence will commence

822 6.0.5 User Activity Authenticated Access

INFO --- Remotely Triggered Dial-session ended. Valid WANdata found. Normal dial-sequence will commence

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 76

out bound up

wn in

wn in

wn in

ause

ause

ause

nge in rface

nge in rface

nge in rface

rage is

rage is

822 6.2.0 User Activity Authenticated Access

INFO --- Remotely Triggered Dial-session ended. Valid WANdata found. Normal dial-sequence will commence

823 5.9.0 System Error High Availability ERROR --- Secondary will be shut do%s minutes

823 6.0.5 System Error High Availability ERROR --- Secondary will be shut do%s minutes

823 6.2.0 System Error High Availability ERROR --- Secondary will be shut do%s minutes

824 5.9.0 System Error High Availability ERROR --- Secondary shut down beclicense is expired

824 6.0.5 System Error High Availability ERROR --- Secondary shut down beclicense is expired

824 6.2.0 System Error High Availability ERROR --- Secondary shut down beclicense is expired

825 5.9.0 System Error High Availability INFO --- Secondary active

825 6.0.5 System Error High Availability INFO --- Secondary active

825 6.2.0 System Error High Availability INFO --- Secondary active

826 5.9.0 --- High Availability ERROR --- %s

826 6.0.5 --- High Availability ERROR --- %s

826 6.2.0 --- High Availability ERROR --- %s

828 5.9.0 --- High Availability INFO --- %s

828 6.0.5 --- High Availability INFO --- %s

828 6.2.0 --- High Availability INFO --- %s

829 5.9.0 --- High Availability ALERT --- %s

829 6.0.5 --- High Availability ALERT --- %s

829 6.2.0 --- High Availability ALERT --- %s

830 5.9.0 --- High Availability NOTICE --- %s

830 6.0.5 --- High Availability NOTICE --- %s

830 6.2.0 --- High Availability NOTICE --- %s

832 5.9.0 --- DHCP Server INFO --- DHCP Scopes altered automatically due to chanetwork settings for inte%s

832 6.0.5 --- DHCP Server INFO --- DHCP Scopes altered automatically due to chanetwork settings for inte%s

832 6.2.0 --- DHCP Server INFO --- DHCP Scopes altered automatically due to chanetwork settings for inte%s

833 5.9.0 System Error DHCP Server WARNING --- DHCP lease file in the stocorrupted; read failed

833 6.0.5 System Error DHCP Server WARNING --- DHCP lease file in the stocorrupted; read failed

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 77

rage is

es to

es to

es to

orage

orage

orage

ted

ted

ted

ge

ge

ge

ame.

ame.

ame.

omain

omain

833 6.2.0 System Error DHCP Server WARNING --- DHCP lease file in the stocorrupted; read failed

834 5.9.0 System Error DHCP Server WARNING --- Failed to write DHCP leasstorage

834 6.0.5 System Error DHCP Server WARNING --- Failed to write DHCP leasstorage

834 6.2.0 System Error DHCP Server WARNING --- Failed to write DHCP leasstorage

835 5.9.0 Maintenance DHCP Server INFO --- DHCP leases written to st

835 6.0.5 Maintenance DHCP Server INFO --- DHCP leases written to st

835 6.2.0 Maintenance DHCP Server INFO --- DHCP leases written to st

840 5.9.0 --- ARS INFO --- %s

840 6.0.5 --- ARS INFO --- %s

840 6.2.0 --- ARS INFO --- %s

841 5.9.0 --- ARS NOTICE --- %s

841 6.0.5 --- DHCP Server NOTICE --- %s

841 6.2.0 --- DHCP Server NOTICE --- %s

842 5.9.0 --- ARS DEBUG --- %s

842 6.0.5 --- ARS DEBUG --- %s

842 6.2.0 --- ARS DEBUG --- %s

847 5.9.0 Maintenance Network WARNING --- IP address conflict detecfrom Ethernet address %s

847 6.0.5 Maintenance Network WARNING --- IP address conflict detecfrom Ethernet address %s

847 6.2.0 Maintenance Network WARNING --- IP address conflict detecfrom Ethernet address %s

848 5.9.0 User Activity VPN PKI INFO --- OCSP sending request.

848 6.0.5 User Activity VPN PKI INFO --- OCSP sending request.

848 6.2.0 User Activity VPN PKI INFO --- OCSP sending request.

849 5.9.0 User Activity VPN PKI ERROR --- OCSP send request messafailed.

849 6.0.5 User Activity VPN PKI ERROR --- OCSP send request messafailed.

849 6.2.0 User Activity VPN PKI ERROR --- OCSP send request messafailed.

850 5.9.0 User Activity VPN PKI INFO --- OCSP received response.

850 6.0.5 User Activity VPN PKI INFO --- OCSP received response.

850 6.2.0 User Activity VPN PKI INFO --- OCSP received response.

852 5.9.0 User Activity VPN PKI INFO --- OCSP Resolved Domain N

852 6.0.5 User Activity VPN PKI INFO --- OCSP Resolved Domain N

852 6.2.0 User Activity VPN PKI INFO --- OCSP Resolved Domain N

853 5.9.0 User Activity VPN PKI ERROR --- OCSP Failed to Resolve DName.

853 6.0.5 User Activity VPN PKI ERROR --- OCSP Failed to Resolve DName.

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 78

omain

ling

ling

ling

by user sible

by user sible

by user sible

by user attack

by user attack

by user attack

by user

by user

by user

ed on

ed on

ed on

%s

%s

%s

853 6.2.0 User Activity VPN PKI ERROR --- OCSP Failed to Resolve DName.

854 5.9.0 User Activity VPN PKI ERROR --- OCSP Internal error handreceived response.

854 6.0.5 User Activity VPN PKI ERROR --- OCSP Internal error handreceived response.

854 6.2.0 User Activity VPN PKI ERROR --- OCSP Internal error handreceived response.

856 5.9.0 Attack Intrusion Detection

WARNING --- SYN Flood Mode changed to: Watch and report posSYN floods

856 6.0.5 Debug Intrusion Detection

WARNING --- SYN Flood Mode changed to: Watch and report posSYN floods

856 6.2.0 Attack Intrusion Detection

WARNING --- SYN Flood Mode changed to: Watch and report posSYN floods

857 5.9.0 Attack Intrusion Detection

WARNING --- SYN Flood Mode changed to: Watch and proxy WANconnections when under

857 6.0.5 Debug Intrusion Detection

WARNING --- SYN Flood Mode changed to: Watch and proxy WANconnections when under

857 6.2.0 Attack Intrusion Detection

WARNING --- SYN Flood Mode changed to: Watch and proxy WANconnections when under

858 5.9.0 Attack Intrusion Detection

WARNING --- SYN Flood Mode changed to: Always proxy WAN connections

858 6.0.5 Debug Intrusion Detection

WARNING --- SYN Flood Mode changed to: Always proxy WAN connections

858 6.2.0 Attack Intrusion Detection

WARNING --- SYN Flood Mode changed to: Always proxy WAN connections

859 5.9.0 Attack Intrusion Detection

ALERT --- Possible SYN flood detectWAN IF %s - switching to connection-proxy mode

859 6.0.5 Debug Intrusion Detection

ALERT --- Possible SYN flood detectWAN IF %s - switching to connection-proxy mode

859 6.2.0 Attack Intrusion Detection

ALERT --- Possible SYN flood detectWAN IF %s - switching to connection-proxy mode

860 5.9.0 Attack Intrusion Detection

ALERT --- Possible SYN Flood on IF

860 6.0.5 Debug Intrusion Detection

ALERT --- Possible SYN Flood on IF

860 6.2.0 Attack Intrusion Detection

ALERT --- Possible SYN Flood on IF

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 79

ing

d

ing

d

ing

d

abled

abled

abled

abled

abled

abled

SYN

SYN

SYN

%s

%s

%s

%s has

%s has

%s has

861 5.9.0 Attack Intrusion Detection

ALERT --- SYN flood ceased or floodmachines blacklisted - connection proxy disable

861 6.0.5 Debug Intrusion Detection

ALERT --- SYN flood ceased or floodmachines blacklisted - connection proxy disable

861 6.2.0 Attack Intrusion Detection

ALERT --- SYN flood ceased or floodmachines blacklisted - connection proxy disable

862 5.9.0 Attack Intrusion Detection

WARNING --- SYN Flood blacklisting enby user

862 6.0.5 Debug Intrusion Detection

WARNING --- SYN Flood blacklisting enby user

862 6.2.0 Attack Intrusion Detection

WARNING --- SYN Flood blacklisting enby user

863 5.9.0 Attack Intrusion Detection

WARNING --- SYN Flood blacklisting disby user

863 6.0.5 Debug Intrusion Detection

WARNING --- SYN Flood blacklisting disby user

863 6.2.0 Attack Intrusion Detection

WARNING --- SYN Flood blacklisting disby user

864 5.9.0 Attack Intrusion Detection

ALERT --- SYN-Flooding machine %sblacklisted

864 6.0.5 Debug Intrusion Detection

ALERT --- SYN-Flooding machine %sblacklisted

864 6.2.0 Attack Intrusion Detection

ALERT --- SYN-Flooding machine %sblacklisted

865 5.9.0 Attack Intrusion Detection

ALERT --- Machine %s removed fromflood blacklist

865 6.0.5 Debug Intrusion Detection

ALERT --- Machine %s removed fromflood blacklist

865 6.2.0 Attack Intrusion Detection

ALERT --- Machine %s removed fromflood blacklist

866 5.9.0 Attack Intrusion Detection

WARNING --- Possible SYN Flood on IF continues

866 6.0.5 Debug Intrusion Detection

WARNING --- Possible SYN Flood on IF continues

866 6.2.0 Attack Intrusion Detection

WARNING --- Possible SYN Flood on IF continues

867 5.9.0 Attack Intrusion Detection

ALERT --- Possible SYN Flood on IF ceased

867 6.0.5 Debug Intrusion Detection

ALERT --- Possible SYN Flood on IF ceased

867 6.2.0 Attack Intrusion Detection

ALERT --- Possible SYN Flood on IF ceased

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 80

%s

%s

%s

ires

ires

ires

Root

Root

Root

th

th

th

reat

reat

reat

ic

ic

868 5.9.0 Attack Intrusion Detection

WARNING --- SYN Flood Blacklist on IF continues

868 6.0.5 Debug Intrusion Detection

WARNING --- SYN Flood Blacklist on IF continues

868 6.2.0 Attack Intrusion Detection

WARNING --- SYN Flood Blacklist on IF continues

869 5.9.0 Attack Intrusion Detection

DEBUG --- TCP SYN received

869 6.0.5 Debug Intrusion Detection

DEBUG --- TCP SYN received

869 6.2.0 Attack Intrusion Detection

DEBUG --- TCP SYN received

872 5.9.0 User Activity Security Services NOTICE --- %s

872 6.0.5 User Activity Security Services NOTICE --- %s

872 6.2.0 User Activity Security Services NOTICE --- %s

874 5.9.0 User Activity VPN PKI ALERT --- CRL has expired

874 6.0.5 User Activity VPN PKI ALERT --- CRL has expired

874 6.2.0 User Activity VPN PKI ALERT --- CRL has expired

875 5.9.0 User Activity VPN PKI ALERT --- Failed to find certificate

875 6.0.5 User Activity VPN PKI ALERT --- Failed to find certificate

875 6.2.0 User Activity VPN PKI ALERT --- Failed to find certificate

876 5.9.0 User Activity VPN PKI ALERT --- CRL missing - Issuer requCRL checking.

876 6.0.5 User Activity VPN PKI ALERT --- CRL missing - Issuer requCRL checking.

876 6.2.0 User Activity VPN PKI ALERT --- CRL missing - Issuer requCRL checking.

877 5.9.0 User Activity VPN PKI ALERT --- CRL validation failure forCertificate

877 6.0.5 User Activity VPN PKI ALERT --- CRL validation failure forCertificate

877 6.2.0 User Activity VPN PKI ALERT --- CRL validation failure forCertificate

878 5.9.0 User Activity VPN PKI ALERT --- Cannot Validate Issuer Pa

878 6.0.5 User Activity VPN PKI ALERT --- Cannot Validate Issuer Pa

878 6.2.0 User Activity VPN PKI ALERT --- Cannot Validate Issuer Pa

879 5.9.0 --- RF Management WARNING --- WLAN radio frequency thdetected

879 6.0.5 --- RF Management WARNING --- WLAN radio frequency thdetected

879 6.2.0 --- RF Management WARNING --- WLAN radio frequency thdetected

880 5.9.0 Maintenance Dynamic Address Objects

INFO --- Unable to resolve dynamaddress object

880 6.0.5 Maintenance Dynamic Address Objects

INFO --- Unable to resolve dynamaddress object

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 81

ic

dated

dated

dated

t

t

t

r;

r;

r;

ket

ket

ket

ket

ket

ket

cket

cket

cket

P

P

P

on-n; TCP

880 6.2.0 Maintenance Dynamic Address Objects

INFO --- Unable to resolve dynamaddress object

881 5.9.0 --- Firewall Logging NOTICE --- System clock manually up

881 6.0.5 --- Firewall Logging NOTICE --- System clock manually up

881 6.2.0 --- Firewall Logging NOTICE --- System clock manually up

882 5.9.0 TCP Network Access DEBUG --- HTTP method detected; examining stream for hosheader

882 6.0.5 TCP Network Access DEBUG --- HTTP method detected; examining stream for hosheader

882 6.2.0 TCP Network Access DEBUG --- HTTP method detected; examining stream for hosheader

883 5.9.0 TCP|UDP Network Access NOTICE --- IP Header checksum erropacket dropped

883 6.0.5 TCP|UDP Network Access NOTICE --- IP Header checksum erropacket dropped

883 6.2.0 TCP|UDP Network Access NOTICE --- IP Header checksum erropacket dropped

884 5.9.0 TCP Network Access NOTICE --- TCP checksum error; pacdropped

884 6.0.5 TCP Network Access NOTICE --- TCP checksum error; pacdropped

884 6.2.0 TCP Network Access NOTICE --- TCP checksum error; pacdropped

885 5.9.0 UDP Network Access NOTICE --- UDP checksum error; pacdropped

885 6.0.5 UDP Network Access NOTICE --- UDP checksum error; pacdropped

885 6.2.0 UDP Network Access NOTICE --- UDP checksum error; pacdropped

886 5.9.0 UDP Network Access NOTICE --- ICMP checksum error; padropped

886 6.0.5 UDP Network Access NOTICE --- ICMP checksum error; padropped

886 6.2.0 UDP Network Access NOTICE --- ICMP checksum error; padropped

887 5.9.0 Debug Network DEBUG --- TCP packet received withinvalid header length; TCpacket dropped

887 6.0.5 Debug Network DEBUG --- TCP packet received withinvalid header length; TCpacket dropped

887 6.2.0 Debug Network DEBUG --- TCP packet received withinvalid header length; TCpacket dropped

888 5.9.0 Debug Network DEBUG --- TCP packet received on nexistent/closed connectiopacket dropped

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 82

on-n; TCP

on-n; TCP

out packet

out packet

out packet

out packet

out packet

out packet

acket

acket

acket

SYN ction;

SYN ction;

SYN ction;

h; TCP

h; TCP

h; TCP

; TCP

888 6.0.5 Debug Network DEBUG --- TCP packet received on nexistent/closed connectiopacket dropped

888 6.2.0 Debug Network DEBUG --- TCP packet received on nexistent/closed connectiopacket dropped

889 5.9.0 Debug Network DEBUG --- TCP packet received withmandatory SYN flag; TCPdropped

889 6.0.5 Debug Network DEBUG --- TCP packet received withmandatory SYN flag; TCPdropped

889 6.2.0 Debug Network DEBUG --- TCP packet received withmandatory SYN flag; TCPdropped

890 5.9.0 Debug Network DEBUG --- TCP packet received withmandatory ACK flag; TCPdropped

890 6.0.5 Debug Network DEBUG --- TCP packet received withmandatory ACK flag; TCPdropped

890 6.2.0 Debug Network DEBUG --- TCP packet received withmandatory ACK flag; TCPdropped

891 5.9.0 Debug Network DEBUG --- TCP packet received on aclosing connection; TCP pdropped

891 6.0.5 Debug Network DEBUG --- TCP packet received on aclosing connection; TCP pdropped

891 6.2.0 Debug Network DEBUG --- TCP packet received on aclosing connection; TCP pdropped

892 5.9.0 Debug Network INFO --- TCP packet received withflag on an existing conneTCP packet dropped

892 6.0.5 Debug Network INFO --- TCP packet received withflag on an existing conneTCP packet dropped

892 6.2.0 Debug Network INFO --- TCP packet received withflag on an existing conneTCP packet dropped

893 5.9.0 Debug Network DEBUG --- TCP packet received withinvalid SACK option lengtpacket dropped

893 6.0.5 Debug Network DEBUG --- TCP packet received withinvalid SACK option lengtpacket dropped

893 6.2.0 Debug Network DEBUG --- TCP packet received withinvalid SACK option lengtpacket dropped

894 5.9.0 Debug Network DEBUG --- TCP packet received withinvalid MSS option lengthpacket dropped

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 83

; TCP

; TCP

P

P

P

packet

packet

packet

TCP

TCP

TCP

%s

%s

%s

RST

RST

894 6.0.5 Debug Network DEBUG --- TCP packet received withinvalid MSS option lengthpacket dropped

894 6.2.0 Debug Network DEBUG --- TCP packet received withinvalid MSS option lengthpacket dropped

895 5.9.0 Debug Network DEBUG --- TCP packet received withinvalid option length; TCpacket dropped

895 6.0.5 Debug Network DEBUG --- TCP packet received withinvalid option length; TCpacket dropped

895 6.2.0 Debug Network DEBUG --- TCP packet received withinvalid option length; TCpacket dropped

896 5.9.0 Debug Network DEBUG --- TCP packet received withinvalid source port; TCP dropped

896 6.0.5 Debug Network DEBUG --- TCP packet received withinvalid source port; TCP dropped

896 6.2.0 Debug Network DEBUG --- TCP packet received withinvalid source port; TCP dropped

897 5.9.0 Attack Network INFO --- TCP packet received withinvalid SYN Flood cookie;packet dropped

897 6.0.5 Debug Network INFO --- TCP packet received withinvalid SYN Flood cookie;packet dropped

897 6.2.0 Attack Network INFO --- TCP packet received withinvalid SYN Flood cookie;packet dropped

898 5.9.0 Attack Intrusion Detection

ALERT --- RST-Flooding machine %sblacklisted

898 6.0.5 Debug Intrusion Detection

ALERT --- RST-Flooding machine %sblacklisted

898 6.2.0 Attack Intrusion Detection

ALERT --- RST-Flooding machine %sblacklisted

899 5.9.0 Attack Intrusion Detection

WARNING --- RST Flood Blacklist on IF continues

899 6.0.5 Debug Intrusion Detection

WARNING --- RST Flood Blacklist on IF continues

899 6.2.0 Attack Intrusion Detection

WARNING --- RST Flood Blacklist on IF continues

900 5.9.0 Attack Intrusion Detection

ALERT --- Machine %s removed fromflood blacklist

900 6.0.5 Debug Intrusion Detection

ALERT --- Machine %s removed fromflood blacklist

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 84

RST

%s

%s

%s

FIN

FIN

FIN

%s

%s

%s

s

s

s

%s has

%s has

%s has

s has

s has

900 6.2.0 Attack Intrusion Detection

ALERT --- Machine %s removed fromflood blacklist

901 5.9.0 Attack Intrusion Detection

ALERT --- FIN-Flooding machine %s blacklisted

901 6.0.5 Debug Intrusion Detection

ALERT --- FIN-Flooding machine %s blacklisted

901 6.2.0 Attack Intrusion Detection

ALERT --- FIN-Flooding machine %s blacklisted

902 5.9.0 Attack Intrusion Detection

WARNING --- FIN Flood Blacklist on IF continues

902 6.0.5 Debug Intrusion Detection

WARNING --- FIN Flood Blacklist on IF continues

902 6.2.0 Attack Intrusion Detection

WARNING --- FIN Flood Blacklist on IF continues

903 5.9.0 Attack Intrusion Detection

ALERT --- Machine %s removed fromflood blacklist

903 6.0.5 Debug Intrusion Detection

ALERT --- Machine %s removed fromflood blacklist

903 6.2.0 Attack Intrusion Detection

ALERT --- Machine %s removed fromflood blacklist

904 5.9.0 Attack Intrusion Detection

ALERT --- Possible RST Flood on IF

904 6.0.5 Debug Intrusion Detection

ALERT --- Possible RST Flood on IF

904 6.2.0 Attack Intrusion Detection

ALERT --- Possible RST Flood on IF

905 5.9.0 Attack Intrusion Detection

ALERT --- Possible FIN Flood on IF %

905 6.0.5 Debug Intrusion Detection

ALERT --- Possible FIN Flood on IF %

905 6.2.0 Attack Intrusion Detection

ALERT --- Possible FIN Flood on IF %

906 5.9.0 Attack Intrusion Detection

ALERT --- Possible RST Flood on IF ceased

906 6.0.5 Debug Intrusion Detection

ALERT --- Possible RST Flood on IF ceased

906 6.2.0 Attack Intrusion Detection

ALERT --- Possible RST Flood on IF ceased

907 5.9.0 Attack Intrusion Detection

ALERT --- Possible FIN Flood on IF %ceased

907 6.0.5 Debug Intrusion Detection

ALERT --- Possible FIN Flood on IF %ceased

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 85

s has

%s

%s

%s

s

s

s

expired

expired

expired

mic

mic

mic

oes not

oes not

oes not

s not

s not

s not

907 6.2.0 Attack Intrusion Detection

ALERT --- Possible FIN Flood on IF %ceased

908 5.9.0 Attack Intrusion Detection

WARNING --- Possible RST Flood on IF continues

908 6.0.5 Debug Intrusion Detection

WARNING --- Possible RST Flood on IF continues

908 6.2.0 Attack Intrusion Detection

WARNING --- Possible RST Flood on IF continues

909 5.9.0 Attack Intrusion Detection

WARNING --- Possible FIN Flood on IF %continues

909 6.0.5 Debug Intrusion Detection

WARNING --- Possible FIN Flood on IF %continues

909 6.2.0 Attack Intrusion Detection

WARNING --- Possible FIN Flood on IF %continues

910 5.9.0 Debug Network WARNING --- Packet Dropped - IP TTL

910 6.0.5 Debug Network WARNING --- Packet Dropped - IP TTL

910 6.2.0 Debug Network WARNING --- Packet Dropped - IP TTL

911 5.9.0 Maintenance Dynamic Address Objects

INFO --- Added host entry to dynaaddress object

911 6.0.5 Maintenance Dynamic Address Objects

INFO --- Added host entry to dynaaddress object

911 6.2.0 Maintenance Dynamic Address Objects

INFO --- Added host entry to dynaaddress object

912 5.9.0 Maintenance Dynamic Address Objects

INFO --- Removed host entry fromdynamic address object

912 6.0.5 Maintenance Dynamic Address Objects

INFO --- Removed host entry fromdynamic address object

912 6.2.0 Maintenance Dynamic Address Objects

INFO --- Removed host entry fromdynamic address object

913 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 Authentication Method dmatch

913 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 Authentication Method dmatch

913 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 Authentication Method dmatch

914 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 encryption algorithm doematch

914 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 encryption algorithm doematch

914 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 encryption algorithm doematch

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 86

length

length

length

ash

ash

ash

AUTH o user

AUTH o user

AUTH o user

AUTH o user

AUTH o user

AUTH o user

H

H

H

does

does

does

ption

915 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 encryption algorithm keydoes not match

915 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 encryption algorithm keydoes not match

915 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 encryption algorithm keydoes not match

916 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 halgorithm does not match

916 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 halgorithm does not match

916 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 halgorithm does not match

917 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 Xrequired but Policy has nname

917 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 Xrequired but Policy has nname

917 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 Xrequired but Policy has nname

918 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 Xrequired but Policy has npassword

918 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 Xrequired but Policy has npassword

918 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 Xrequired but Policy has npassword

919 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 DGroup does not match

919 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 DGroup does not match

919 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: Phase 1 DGroup does not match

920 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: AH authentication algorithmnot match

920 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: AH authentication algorithmnot match

920 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: AH authentication algorithmnot match

921 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: ESP encryalgorithm does not match

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 87

ption

ption

does

does

does

does

does

does

ption h

ption h

ption h

does

does

does

s does

s does

s does

ption h

ption h

921 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: ESP encryalgorithm does not match

921 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: ESP encryalgorithm does not match

922 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: ESP authentication algorithmnot match

922 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: ESP authentication algorithmnot match

922 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: ESP authentication algorithmnot match

923 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: AH authentication key lengthnot match

923 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: AH authentication key lengthnot match

923 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: AH authentication key lengthnot match

924 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: ESP encrykey length does not matc

924 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: ESP encrykey length does not matc

924 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: ESP encrykey length does not matc

925 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: ESP authentication key lengthnot match

925 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: ESP authentication key lengthnot match

925 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: ESP authentication key lengthnot match

926 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: AH authentication key roundnot match

926 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: AH authentication key roundnot match

926 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: AH authentication key roundnot match

927 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: ESP encrykey rounds does not matc

927 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: ESP encrykey rounds does not matc

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 88

ption h

s does

s does

s does

ty IKE

ty IKE

ty IKE

arty IKE

arty IKE

arty IKE

tocol

tocol

tocol

E ID

E ID

E ID

al VPN

al VPN

al VPN

not l

927 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: ESP encrykey rounds does not matc

928 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: ESP authentication key roundnot match

928 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: ESP authentication key roundnot match

928 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: ESP authentication key roundnot match

930 5.9.0 User Activity VPN IKE INFO --- IKE Initiator: Remote parTimeout - RetransmittingRequest.

930 6.0.5 User Activity VPN IKE INFO --- IKE Initiator: Remote parTimeout - RetransmittingRequest.

930 6.2.0 User Activity VPN IKE INFO --- IKE Initiator: Remote parTimeout - RetransmittingRequest.

931 5.9.0 User Activity VPN IKE INFO --- IKE Responder: Remote pTimeout - RetransmittingRequest.

931 6.0.5 User Activity VPN IKE INFO --- IKE Responder: Remote pTimeout - RetransmittingRequest.

931 6.2.0 User Activity VPN IKE INFO --- IKE Responder: Remote pTimeout - RetransmittingRequest.

932 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: IPsec promismatch

932 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: IPsec promismatch

932 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: IPsec promismatch

933 5.9.0 User Activity VPN IKE WARNING --- IKE Initiator: Proposed IKmismatch

933 6.0.5 User Activity VPN IKE WARNING --- IKE Initiator: Proposed IKmismatch

933 6.2.0 User Activity VPN IKE WARNING --- IKE Initiator: Proposed IKmismatch

934 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: Peer's locnetwork does not match Policy's [Destination ]

934 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: Peer's locnetwork does not match Policy's [Destination ]

934 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: Peer's locnetwork does not match Policy's [Destination ]

935 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: Peer's destination network doesmatch VPN Policy's [LocaNetwork]

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 89

not l

not l

le

le

le

l does

l does

l does

d

d

d

AUTH

AUTH

AUTH

d

d

d

cessful

cessful

cessful

osal

935 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: Peer's destination network doesmatch VPN Policy's [LocaNetwork]

935 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: Peer's destination network doesmatch VPN Policy's [LocaNetwork]

936 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: Route taboverrides VPN Policy

936 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: Route taboverrides VPN Policy

936 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: Route taboverrides VPN Policy

937 5.9.0 User Activity VPN IKE WARNING --- IKE Initiator: IKE proposanot match (Phase 1)

937 6.0.5 User Activity VPN IKE WARNING --- IKE Initiator: IKE proposanot match (Phase 1)

937 6.2.0 User Activity VPN IKE WARNING --- IKE Initiator: IKE proposanot match (Phase 1)

938 5.9.0 User Activity VPN IKE INFO --- IKEv2 Initiator: Send IKE_SA_INIT Request

938 6.0.5 User Activity VPN IKE INFO --- IKEv2 Initiator: Send IKE_SA_INIT Request

938 6.2.0 User Activity VPN IKE INFO --- IKEv2 Initiator: Send IKE_SA_INIT Request

939 5.9.0 User Activity VPN IKE INFO --- IKEv2 Responder: ReceiveIKE_SA_INIT Request

939 6.0.5 User Activity VPN IKE INFO --- IKEv2 Responder: ReceiveIKE_SA_INIT Request

939 6.2.0 User Activity VPN IKE INFO --- IKEv2 Responder: ReceiveIKE_SA_INIT Request

940 5.9.0 User Activity VPN IKE INFO --- IKEv2 Initiator: Send IKE_Request

940 6.0.5 User Activity VPN IKE INFO --- IKEv2 Initiator: Send IKE_Request

940 6.2.0 User Activity VPN IKE INFO --- IKEv2 Initiator: Send IKE_Request

941 5.9.0 User Activity VPN IKE INFO --- IKEv2 Responder: ReceiveIKE_AUTH Request

941 6.0.5 User Activity VPN IKE INFO --- IKEv2 Responder: ReceiveIKE_AUTH Request

941 6.2.0 User Activity VPN IKE INFO --- IKEv2 Responder: ReceiveIKE_AUTH Request

942 5.9.0 User Activity VPN IKE INFO --- IKEv2 Authentication suc

942 6.0.5 User Activity VPN IKE INFO --- IKEv2 Authentication suc

942 6.2.0 User Activity VPN IKE INFO --- IKEv2 Authentication suc

943 5.9.0 User Activity VPN IKE INFO --- IKEv2 Accept IKE SA Prop

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 90

osal

osal

posal

posal

posal

st

st

st

d st

d st

d st

E SA

E SA

E SA

A

A

A

ec SA

ec SA

ec SA

not l

not l

943 6.0.5 User Activity VPN IKE INFO --- IKEv2 Accept IKE SA Prop

943 6.2.0 User Activity VPN IKE INFO --- IKEv2 Accept IKE SA Prop

944 5.9.0 User Activity VPN IKE INFO --- IKEv2 Accept IPsec SA Pro

944 6.0.5 User Activity VPN IKE INFO --- IKEv2 Accept IPsec SA Pro

944 6.2.0 User Activity VPN IKE INFO --- IKEv2 Accept IPsec SA Pro

945 5.9.0 User Activity VPN IKE INFO --- IKEv2 Initiator: Send CREATE_CHILD_SA Reque

945 6.0.5 User Activity VPN IKE INFO --- IKEv2 Initiator: Send CREATE_CHILD_SA Reque

945 6.2.0 User Activity VPN IKE INFO --- IKEv2 Initiator: Send CREATE_CHILD_SA Reque

946 5.9.0 User Activity VPN IKE INFO --- IKEv2 Responder: ReceiveCREATE_CHILD_SA Reque

946 6.0.5 User Activity VPN IKE INFO --- IKEv2 Responder: ReceiveCREATE_CHILD_SA Reque

946 6.2.0 User Activity VPN IKE INFO --- IKEv2 Responder: ReceiveCREATE_CHILD_SA Reque

947 5.9.0 User Activity VPN IKE INFO --- IKEv2 Send delete IKE SARequest

947 6.0.5 User Activity VPN IKE INFO --- IKEv2 Send delete IKE SARequest

947 6.2.0 User Activity VPN IKE INFO --- IKEv2 Send delete IKE SARequest

948 5.9.0 User Activity VPN IKE INFO --- IKEv2 Received delete IKRequest

948 6.0.5 User Activity VPN IKE INFO --- IKEv2 Received delete IKRequest

948 6.2.0 User Activity VPN IKE INFO --- IKEv2 Received delete IKRequest

949 5.9.0 User Activity VPN IKE INFO --- IKEv2 Send delete IPsec SRequest

949 6.0.5 User Activity VPN IKE INFO --- IKEv2 Send delete IPsec SRequest

949 6.2.0 User Activity VPN IKE INFO --- IKEv2 Send delete IPsec SRequest

950 5.9.0 User Activity VPN IKE INFO --- IKEv2 Received delete IPsRequest

950 6.0.5 User Activity VPN IKE INFO --- IKEv2 Received delete IPsRequest

950 6.2.0 User Activity VPN IKE INFO --- IKEv2 Received delete IPsRequest

951 5.9.0 User Activity VPN IKE INFO --- IKEv2 Responder: Peer's destination network doesmatch VPN Policy's [LocaNetwork]

951 6.0.5 User Activity VPN IKE INFO --- IKEv2 Responder: Peer's destination network doesmatch VPN Policy's [LocaNetwork]

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 91

not l

ocal VPN ork]

ocal VPN ork]

ocal VPN ork]

error

error

error

ons esent.

ons esent.

ons esent.

ons

ons

ons

ons .

ons .

ons .

ons te.

ons te.

ons te.

failed.

failed.

failed.

SA

SA

951 6.2.0 User Activity VPN IKE INFO --- IKEv2 Responder: Peer's destination network doesmatch VPN Policy's [LocaNetwork]

952 5.9.0 User Activity VPN IKE INFO --- IKEv2 Responder: Peer's lnetwork does not match Policy's [Destination Netw

952 6.0.5 User Activity VPN IKE INFO --- IKEv2 Responder: Peer's lnetwork does not match Policy's [Destination Netw

952 6.2.0 User Activity VPN IKE INFO --- IKEv2 Responder: Peer's lnetwork does not match Policy's [Destination Netw

953 5.9.0 User Activity VPN IKE WARNING --- IKEv2 Payload processing

953 6.0.5 User Activity VPN IKE WARNING --- IKEv2 Payload processing

953 6.2.0 User Activity VPN IKE WARNING --- IKEv2 Payload processing

954 5.9.0 User Activity VPN IKE WARNING --- IKEv2 Initiator: Negotiatifailed. Extra payloads pr

954 6.0.5 User Activity VPN IKE WARNING --- IKEv2 Initiator: Negotiatifailed. Extra payloads pr

954 6.2.0 User Activity VPN IKE WARNING --- IKEv2 Initiator: Negotiatifailed. Extra payloads pr

955 5.9.0 User Activity VPN IKE WARNING --- IKEv2 Initiator: Negotiatifailed. Missing required payloads.

955 6.0.5 User Activity VPN IKE WARNING --- IKEv2 Initiator: Negotiatifailed. Missing required payloads.

955 6.2.0 User Activity VPN IKE WARNING --- IKEv2 Initiator: Negotiatifailed. Missing required payloads.

956 5.9.0 User Activity VPN IKE WARNING --- IKEv2 Initiator: Negotiatifailed. Invalid input state

956 6.0.5 User Activity VPN IKE WARNING --- IKEv2 Initiator: Negotiatifailed. Invalid input state

956 6.2.0 User Activity VPN IKE WARNING --- IKEv2 Initiator: Negotiatifailed. Invalid input state

957 5.9.0 User Activity VPN IKE WARNING --- IKEv2 Initiator: Negotiatifailed. Invalid output sta

957 6.0.5 User Activity VPN IKE WARNING --- IKEv2 Initiator: Negotiatifailed. Invalid output sta

957 6.2.0 User Activity VPN IKE WARNING --- IKEv2 Initiator: Negotiatifailed. Invalid output sta

958 5.9.0 User Activity VPN IKE WARNING --- IKEv2 Payload validation

958 6.0.5 User Activity VPN IKE WARNING --- IKEv2 Payload validation

958 6.2.0 User Activity VPN IKE WARNING --- IKEv2 Payload validation

959 5.9.0 User Activity VPN IKE WARNING --- IKEv2 Unable to find IKE

959 6.0.5 User Activity VPN IKE WARNING --- IKEv2 Unable to find IKE

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 92

SA

ed

ed

ed

or

or

or

eue

eue

eue

icy has

ation.

icy has

ation.

icy has

ation.

d

d

d

not

not

not

found

found

found

und

959 6.2.0 User Activity VPN IKE WARNING --- IKEv2 Unable to find IKE

960 5.9.0 User Activity VPN IKE WARNING --- IKEv2 Decrypt packet fail

960 6.0.5 User Activity VPN IKE WARNING --- IKEv2 Decrypt packet fail

960 6.2.0 User Activity VPN IKE WARNING --- IKEv2 Decrypt packet fail

961 5.9.0 User Activity VPN IKE WARNING --- IKEv2 Out of memory

961 6.0.5 User Activity VPN IKE WARNING --- IKEv2 Out of memory

961 6.2.0 User Activity VPN IKE WARNING --- IKEv2 Out of memory

962 5.9.0 User Activity VPN IKE ERROR --- IKEv2 Responder: Policy fremote IKE ID not found

962 6.0.5 User Activity VPN IKE ERROR --- IKEv2 Responder: Policy fremote IKE ID not found

962 6.2.0 User Activity VPN IKE ERROR --- IKEv2 Responder: Policy fremote IKE ID not found

963 5.9.0 User Activity VPN IKE WARNING --- IKEv2 Process Message qufailed

963 6.0.5 User Activity VPN IKE WARNING --- IKEv2 Process Message qufailed

963 6.2.0 User Activity VPN IKE WARNING --- IKEv2 Process Message qufailed

964 5.9.0 User Activity VPN IKE WARNING --- IKEv2 Invalid state

964 6.0.5 User Activity VPN IKE WARNING --- IKEv2 Invalid state

964 6.2.0 User Activity VPN IKE WARNING --- IKEv2 Invalid state

965 5.9.0 System Error VPN IKE ERROR --- IKE Responder: Client Polno VPN Access Networks assigned. Check Configur

965 6.0.5 System Error VPN IKE ERROR --- IKE Responder: Client Polno VPN Access Networks assigned. Check Configur

965 6.2.0 System Error VPN IKE ERROR --- IKE Responder: Client Polno VPN Access Networks assigned. Check Configur

966 5.9.0 User Activity VPN IKE WARNING --- IKEv2 Invalid SPI size

966 6.0.5 User Activity VPN IKE WARNING --- IKEv2 Invalid SPI size

966 6.2.0 User Activity VPN IKE WARNING --- IKEv2 Invalid SPI size

967 5.9.0 User Activity VPN IKE WARNING --- IKEv2 VPN Policy not foun

967 6.0.5 User Activity VPN IKE WARNING --- IKEv2 VPN Policy not foun

967 6.2.0 User Activity VPN IKE WARNING --- IKEv2 VPN Policy not foun

968 5.9.0 User Activity VPN IKE WARNING --- IKEv2 IPsec proposal doesmatch

968 6.0.5 User Activity VPN IKE WARNING --- IKEv2 IPsec proposal doesmatch

968 6.2.0 User Activity VPN IKE WARNING --- IKEv2 IPsec proposal doesmatch

969 5.9.0 User Activity VPN IKE WARNING --- IKEv2 IPsec attribute not

969 6.0.5 User Activity VPN IKE WARNING --- IKEv2 IPsec attribute not

969 6.2.0 User Activity VPN IKE WARNING --- IKEv2 IPsec attribute not

970 5.9.0 User Activity VPN IKE WARNING --- IKEv2 IKE attribute not fo

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 93

und

und

ing.

ing.

ing.

arty IKEv2

arty IKEv2

arty IKEv2

se

se

se

te

te

970 6.0.5 User Activity VPN IKE WARNING --- IKEv2 IKE attribute not fo

970 6.2.0 User Activity VPN IKE WARNING --- IKEv2 IKE attribute not fo

971 5.9.0 User Activity VPN IKE WARNING --- IKEv2 Peer is not respondNegotiation aborted.

971 6.0.5 User Activity VPN IKE WARNING --- IKEv2 Peer is not respondNegotiation aborted.

971 6.2.0 User Activity VPN IKE WARNING --- IKEv2 Peer is not respondNegotiation aborted.

972 5.9.0 User Activity VPN IKE INFO --- IKEv2 Initiator: Remote pTimeout - RetransmittingRequest.

972 6.0.5 User Activity VPN IKE INFO --- IKEv2 Initiator: Remote pTimeout - RetransmittingRequest.

972 6.2.0 User Activity VPN IKE INFO --- IKEv2 Initiator: Remote pTimeout - RetransmittingRequest.

973 5.9.0 User Activity VPN IKE INFO --- IKEv2 Initiator: Received IKE_SA_INT response

973 6.0.5 User Activity VPN IKE INFO --- IKEv2 Initiator: Received IKE_SA_INT response

973 6.2.0 User Activity VPN IKE INFO --- IKEv2 Initiator: Received IKE_SA_INT response

974 5.9.0 User Activity VPN IKE INFO --- IKEv2 Initiator: Received IKE_AUTH response

974 6.0.5 User Activity VPN IKE INFO --- IKEv2 Initiator: Received IKE_AUTH response

974 6.2.0 User Activity VPN IKE INFO --- IKEv2 Initiator: Received IKE_AUTH response

975 5.9.0 User Activity VPN IKE INFO --- IKEv2 Initiator: Received CREATE_CHILD_SA respon

975 6.0.5 User Activity VPN IKE INFO --- IKEv2 Initiator: Received CREATE_CHILD_SA respon

975 6.2.0 User Activity VPN IKE INFO --- IKEv2 Initiator: Received CREATE_CHILD_SA respon

976 5.9.0 User Activity VPN IKE INFO --- IKEv2 Responder: Send IKE_SA_INIT response

976 6.0.5 User Activity VPN IKE INFO --- IKEv2 Responder: Send IKE_SA_INIT response

976 6.2.0 User Activity VPN IKE INFO --- IKEv2 Responder: Send IKE_SA_INIT response

977 5.9.0 User Activity VPN IKE INFO --- IKEv2 Responder: Send IKE_AUTH response

977 6.0.5 User Activity VPN IKE INFO --- IKEv2 Responder: Send IKE_AUTH response

977 6.2.0 User Activity VPN IKE INFO --- IKEv2 Responder: Send IKE_AUTH response

978 5.9.0 User Activity VPN IKE INFO --- IKEv2 negotiation comple

978 6.0.5 User Activity VPN IKE INFO --- IKEv2 negotiation comple

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 94

te

ailed

ailed

ailed

IKE ID

IKE ID

IKE ID

ot

ot

ot

tus

tus

tus

or

or

or

cted rs

cted rs

cted rs

d rs

d rs

d rs

llowed

llowed

978 6.2.0 User Activity VPN IKE INFO --- IKEv2 negotiation comple

979 5.9.0 User Activity VPN IKE ERROR --- IKEv2 Function sendto() fto transmit packet.

979 6.0.5 User Activity VPN IKE ERROR --- IKEv2 Function sendto() fto transmit packet.

979 6.2.0 User Activity VPN IKE ERROR --- IKEv2 Function sendto() fto transmit packet.

980 5.9.0 User Activity VPN IKE WARNING --- IKEv2 Initiator: Proposedmismatch

980 6.0.5 User Activity VPN IKE WARNING --- IKEv2 Initiator: Proposedmismatch

980 6.2.0 User Activity VPN IKE WARNING --- IKEv2 Initiator: Proposedmismatch

981 5.9.0 User Activity VPN IKE WARNING --- IKEv2 IKE proposal does nmatch

981 6.0.5 User Activity VPN IKE WARNING --- IKEv2 IKE proposal does nmatch

981 6.2.0 User Activity VPN IKE WARNING --- IKEv2 IKE proposal does nmatch

982 5.9.0 User Activity VPN IKE INFO --- IKEv2 Received notify stapayload

982 6.0.5 User Activity VPN IKE INFO --- IKEv2 Received notify stapayload

982 6.2.0 User Activity VPN IKE INFO --- IKEv2 Received notify stapayload

983 5.9.0 User Activity VPN IKE WARNING --- IKEv2 Received notify errpayload

983 6.0.5 User Activity VPN IKE WARNING --- IKEv2 Received notify errpayload

983 6.2.0 User Activity VPN IKE WARNING --- IKEv2 Received notify errpayload

984 5.9.0 User Activity VPN IKE INFO --- IKEv2 No NAT device detebetween negotiating pee

984 6.0.5 User Activity VPN IKE INFO --- IKEv2 No NAT device detebetween negotiating pee

984 6.2.0 User Activity VPN IKE INFO --- IKEv2 No NAT device detebetween negotiating pee

985 5.9.0 User Activity VPN IKE INFO --- IKEv2 NAT device detectebetween negotiating pee

985 6.0.5 User Activity VPN IKE INFO --- IKEv2 NAT device detectebetween negotiating pee

985 6.2.0 User Activity VPN IKE INFO --- IKEv2 NAT device detectebetween negotiating pee

986 5.9.0 User Activity Authenticated Access

INFO --- User login denied - not aby Policy rule

986 6.0.5 User Activity Authenticated Access

INFO --- User login denied - not aby Policy rule

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 95

llowed

und

und

und

gent

gent

gent

gent

gent

gent

gent

gent

gent

gent

gent

gent

name

name

name

in

in

in

986 6.2.0 User Activity Authenticated Access

INFO --- User login denied - not aby Policy rule

987 5.9.0 User Activity Authenticated Access

INFO --- User login denied - not folocally

987 6.0.5 User Activity Authenticated Access

INFO --- User login denied - not folocally

987 6.2.0 User Activity Authenticated Access

INFO --- User login denied - not folocally

988 5.9.0 User Activity Authenticated Access

WARNING --- User login denied - SSO aTimeout

988 6.0.5 User Activity Authenticated Access

WARNING --- User login denied - SSO aTimeout

988 6.2.0 User Activity Authenticated Access

WARNING --- User login denied - SSO aTimeout

989 5.9.0 User Activity Authenticated Access

WARNING --- User login denied - SSO aconfiguration error

989 6.0.5 User Activity Authenticated Access

WARNING --- User login denied - SSO aconfiguration error

989 6.2.0 User Activity Authenticated Access

WARNING --- User login denied - SSO aconfiguration error

990 5.9.0 User Activity Authenticated Access

WARNING --- User login denied - SSO acommunication problem

990 6.0.5 User Activity Authenticated Access

WARNING --- User login denied - SSO acommunication problem

990 6.2.0 User Activity Authenticated Access

WARNING --- User login denied - SSO acommunication problem

991 5.9.0 User Activity Authenticated Access

WARNING --- User login denied - SSO aname resolution failed

991 6.0.5 User Activity Authenticated Access

WARNING --- User login denied - SSO aname resolution failed

991 6.2.0 User Activity Authenticated Access

WARNING --- User login denied - SSO aname resolution failed

992 5.9.0 User Activity CIA WARNING --- SSO agent returned user too long

992 6.0.5 User Activity CIA WARNING --- SSO agent returned user too long

992 6.2.0 User Activity CIA WARNING --- SSO agent returned user too long

993 5.9.0 User Activity CIA WARNING --- SSO agent returned domaname too long

993 6.0.5 User Activity CIA WARNING --- SSO agent returned domaname too long

993 6.2.0 User Activity CIA WARNING --- SSO agent returned domaname too long

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 96

arted

arted

arted

ded

ded

ded

arted

arted

arted

arted

arted

arted

n

n

n

nd in

nd in

nd in

nd in

nd in

nd in

L2

L2

L2

994 5.9.0 User Activity Authenticated Access

INFO --- Configuration mode administration session st

994 6.0.5 User Activity Authenticated Access

INFO --- Configuration mode administration session st

994 6.2.0 User Activity Authenticated Access

INFO --- Configuration mode administration session st

995 5.9.0 User Activity Authenticated Access

INFO --- Configuration mode administration session en

995 6.0.5 User Activity Authenticated Access

INFO --- Configuration mode administration session en

995 6.2.0 User Activity Authenticated Access

INFO --- Configuration mode administration session en

996 5.9.0 User Activity Authenticated Access

INFO --- Read-only mode GUI administration session st

996 6.0.5 User Activity Authenticated Access

INFO --- Read-only mode GUI administration session st

996 6.2.0 User Activity Authenticated Access

INFO --- Read-only mode GUI administration session st

997 5.9.0 User Activity Authenticated Access

INFO --- Non-config mode GUI administration session st

997 6.0.5 User Activity Authenticated Access

INFO --- Non-config mode GUI administration session st

997 6.2.0 User Activity Authenticated Access

INFO --- Non-config mode GUI administration session st

998 5.9.0 User Activity Authenticated Access

INFO --- GUI administration sessioended

998 6.0.5 User Activity Authenticated Access

INFO --- GUI administration sessioended

998 6.2.0 User Activity Authenticated Access

INFO --- GUI administration sessioended

999 5.9.0 Blocked Sites Network Access INFO --- SSL Control: Website foublacklist

999 6.0.5 Blocked Sites Network Access INFO --- SSL Control: Website foublacklist

999 6.2.0 Blocked Sites Network Access INFO --- SSL Control: Website foublacklist

1000 5.9.0 Blocked Sites Network Access INFO --- SSL Control: Website fouwhitelist

1000 6.0.5 Blocked Sites Network Access INFO --- SSL Control: Website fouwhitelist

1000 6.2.0 Blocked Sites Network Access INFO --- SSL Control: Website fouwhitelist

1001 5.9.0 Blocked Sites Network Access INFO --- SSL Control: HTTPS via SS

1001 6.0.5 Blocked Sites Network Access INFO --- SSL Control: HTTPS via SS

1001 6.2.0 Blocked Sites Network Access INFO --- SSL Control: HTTPS via SS

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 97

ith

ith

ith

being

being

being

A

A

A

hain

hain

hain

code

code

code

d

d

d

highly

highly

highly

1002 5.9.0 Blocked Sites Network Access INFO --- SSL Control: Certificate winvalid date

1002 6.0.5 Blocked Sites Network Access INFO --- SSL Control: Certificate winvalid date

1002 6.2.0 Blocked Sites Network Access INFO --- SSL Control: Certificate winvalid date

1003 5.9.0 Blocked Sites Network Access INFO --- SSL Control: Self-signed certificate

1003 6.0.5 Blocked Sites Network Access INFO --- SSL Control: Self-signed certificate

1003 6.2.0 Blocked Sites Network Access INFO --- SSL Control: Self-signed certificate

1004 5.9.0 Blocked Sites Network Access INFO --- SSL Control: Weak cipherused

1004 6.0.5 Blocked Sites Network Access INFO --- SSL Control: Weak cipherused

1004 6.2.0 Blocked Sites Network Access INFO --- SSL Control: Weak cipherused

1005 5.9.0 Blocked Sites Network Access INFO --- SSL Control: Untrusted C

1005 6.0.5 Blocked Sites Network Access INFO --- SSL Control: Untrusted C

1005 6.2.0 Blocked Sites Network Access INFO --- SSL Control: Untrusted C

1006 5.9.0 Blocked Sites Network Access INFO --- SSL Control: Certificate cnot complete

1006 6.0.5 Blocked Sites Network Access INFO --- SSL Control: Certificate cnot complete

1006 6.2.0 Blocked Sites Network Access INFO --- SSL Control: Certificate cnot complete

1007 5.9.0 Blocked Sites Network Access INFO --- SSL Control: Failed to deServer Hello

1007 6.0.5 Blocked Sites Network Access INFO --- SSL Control: Failed to deServer Hello

1007 6.2.0 Blocked Sites Network Access INFO --- SSL Control: Failed to deServer Hello

1008 5.9.0 User Activity Authenticated Access

INFO --- User logged out - logout detected by SSO

1008 6.0.5 User Activity Authenticated Access

INFO --- User logged out - logout detected by SSO

1008 6.2.0 User Activity Authenticated Access

INFO --- User logged out - logout detected by SSO

1009 5.9.0 System Error RADIUS ERROR --- Bind to LDAP server faile

1009 6.0.5 System Error RADIUS ERROR --- Bind to LDAP server faile

1009 6.2.0 System Error RADIUS ERROR --- Bind to LDAP server faile

1010 5.9.0 System Error RADIUS ALERT --- Using LDAP without TLS -insecure

1010 6.0.5 System Error RADIUS ALERT --- Using LDAP without TLS -insecure

1010 6.2.0 System Error RADIUS ALERT --- Using LDAP without TLS -insecure

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 98

ative will sswords

ative will sswords

ative will sswords

se

se

se

A

A

A

E SA

E SA

E SA

ec SA

ec SA

ec SA

d

d

d

1011 5.9.0 System Error RADIUS WARNING --- LDAP using non-administraccount - VPN client usernot be able to change pa

1011 6.0.5 System Error RADIUS WARNING --- LDAP using non-administraccount - VPN client usernot be able to change pa

1011 6.2.0 System Error RADIUS WARNING --- LDAP using non-administraccount - VPN client usernot be able to change pa

1012 5.9.0 User Activity VPN IKE INFO --- IKEv2 Responder: Send CREATE_CHILD_SA respon

1012 6.0.5 User Activity VPN IKE INFO --- IKEv2 Responder: Send CREATE_CHILD_SA respon

1012 6.2.0 User Activity VPN IKE INFO --- IKEv2 Responder: Send CREATE_CHILD_SA respon

1013 5.9.0 User Activity VPN IKE INFO --- IKEv2 Send delete IKE SAresponse

1013 6.0.5 User Activity VPN IKE INFO --- IKEv2 Send delete IKE SAresponse

1013 6.2.0 User Activity VPN IKE INFO --- IKEv2 Send delete IKE SAresponse

1014 5.9.0 User Activity VPN IKE INFO --- IKEv2 Send delete IPsec Sresponse

1014 6.0.5 User Activity VPN IKE INFO --- IKEv2 Send delete IPsec Sresponse

1014 6.2.0 User Activity VPN IKE INFO --- IKEv2 Send delete IPsec Sresponse

1015 5.9.0 User Activity VPN IKE INFO --- IKEv2 Received delete IKresponse

1015 6.0.5 User Activity VPN IKE INFO --- IKEv2 Received delete IKresponse

1015 6.2.0 User Activity VPN IKE INFO --- IKEv2 Received delete IKresponse

1016 5.9.0 User Activity VPN IKE INFO --- IKEv2 Received delete IPsresponse

1016 6.0.5 User Activity VPN IKE INFO --- IKEv2 Received delete IPsresponse

1016 6.2.0 User Activity VPN IKE INFO --- IKEv2 Received delete IPsresponse

1017 5.9.0 System Environment

Firewall Hardware INFO --- 3G/4G %s device detecte

1017 6.0.5 System Environment

Firewall Hardware INFO --- 3G/4G %s device detecte

1017 6.2.0 System Environment

Firewall Hardware INFO --- 3G/4G %s device detecte

1018 5.9.0 --- PPP INFO --- PPP message: %s

1018 6.0.5 --- PPP INFO --- PPP message: %s

1018 6.2.0 --- PPP INFO --- PPP message: %s

1019 5.9.0 User Activity PPP Dial-Up INFO --- Chat started

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 99

to dial-

to dial-

to dial-

e limit cycle. .

e limit cycle. .

e limit cycle. .

nt igured

nt igured

nt igured

non-cket

non-cket

non-cket

1019 6.0.5 User Activity PPP Dial-Up INFO --- Chat started

1019 6.2.0 User Activity PPP Dial-Up INFO --- Chat started

1020 5.9.0 User Activity PPP Dial-Up INFO --- Chat completed

1020 6.0.5 User Activity PPP Dial-Up INFO --- Chat completed

1020 6.2.0 User Activity PPP Dial-Up INFO --- Chat completed

1021 5.9.0 User Activity PPP Dial-Up INFO --- Chat wrote '%s'

1021 6.0.5 User Activity PPP Dial-Up INFO --- Chat wrote '%s'

1021 6.2.0 User Activity PPP Dial-Up INFO --- Chat wrote '%s'

1022 5.9.0 User Activity PPP Dial-Up INFO --- Chat %s

1022 6.0.5 User Activity PPP Dial-Up INFO --- Chat %s

1022 6.2.0 User Activity PPP Dial-Up INFO --- Chat %s

1023 5.9.0 User Activity PPP Dial-Up INFO --- Chat failed: %s

1023 6.0.5 User Activity PPP Dial-Up INFO --- Chat failed: %s

1023 6.2.0 User Activity PPP Dial-Up INFO --- Chat failed: %s

1024 5.9.0 System Error PPP Dial-Up ERROR --- Unable to send message up task

1024 6.0.5 System Error PPP Dial-Up ERROR --- Unable to send message up task

1024 6.2.0 System Error PPP Dial-Up ERROR --- Unable to send message up task

1026 5.9.0 User Activity PPP Dial-Up ALERT --- 3G/4G Dial-up: %s.

1026 6.0.5 User Activity PPP Dial-Up ALERT --- 3G/4G Dial-up: %s.

1026 6.2.0 User Activity PPP Dial-Up ALERT --- 3G/4G Dial-up: %s.

1027 5.9.0 User Activity PPP Dial-Up ALERT 7643 3G/4G Dial-up: data usagreached for the '%s' billingDisconnecting the session

1027 6.0.5 User Activity PPP Dial-Up ALERT 7643 3G/4G Dial-up: data usagreached for the '%s' billingDisconnecting the session

1027 6.2.0 User Activity PPP Dial-Up ALERT 7643 3G/4G Dial-up: data usagreached for the '%s' billingDisconnecting the session

1028 5.9.0 System Error PPP Dial-Up ALERT --- %s auto-dial failed: CurreConnection Model is confas Ethernet Only

1028 6.0.5 System Error PPP Dial-Up ALERT --- %s auto-dial failed: CurreConnection Model is confas Ethernet Only

1028 6.2.0 System Error PPP Dial-Up ALERT --- %s auto-dial failed: CurreConnection Model is confas Ethernet Only

1029 5.9.0 Debug Network DEBUG --- TCP packet received withpermitted option; TCP padropped

1029 6.0.5 Debug Network DEBUG --- TCP packet received withpermitted option; TCP padropped

1029 6.2.0 Debug Network DEBUG --- TCP packet received withpermitted option; TCP padropped

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 100

ion ed

ion ed

ion ed

ion ed

ion ed

ion ed

user val

user val

user val

ord

ord

ord

1

1

1

d by '%s'

d by '%s'

d by '%s'

by

by

by

1030 5.9.0 Debug Network DEBUG --- TCP packet received withinvalid Window Scale optlength; TCP packet dropp

1030 6.0.5 Debug Network DEBUG --- TCP packet received withinvalid Window Scale optlength; TCP packet dropp

1030 6.2.0 Debug Network DEBUG --- TCP packet received withinvalid Window Scale optlength; TCP packet dropp

1031 5.9.0 Debug Network DEBUG --- TCP packet received withinvalid Window Scale optvalue; TCP packet dropp

1031 6.0.5 Debug Network DEBUG --- TCP packet received withinvalid Window Scale optvalue; TCP packet dropp

1031 6.2.0 Debug Network DEBUG --- TCP packet received withinvalid Window Scale optvalue; TCP packet dropp

1033 5.9.0 User Activity Authenticated Access

WARNING --- Problem occurred duringgroup membership retrie

1033 6.0.5 User Activity Authenticated Access

WARNING --- Problem occurred duringgroup membership retrie

1033 6.2.0 User Activity Authenticated Access

WARNING --- Problem occurred duringgroup membership retrie

1035 5.9.0 User Activity Authenticated Access

INFO --- User login denied - passwexpired

1035 6.0.5 User Activity Authenticated Access

INFO --- User login denied - passwexpired

1035 6.2.0 User Activity Authenticated Access

INFO --- User login denied - passwexpired

1036 5.9.0 User Activity VPN IKE ERROR --- IKE Responder: IKE Phaseexchange does not match

1036 6.0.5 User Activity VPN IKE ERROR --- IKE Responder: IKE Phaseexchange does not match

1036 6.2.0 User Activity VPN IKE ERROR --- IKE Responder: IKE Phaseexchange does not match

1037 5.9.0 --- PPP Dial-Up INFO --- PPP Dial-Up: Starting PPP

1037 6.0.5 --- PPP Dial-Up INFO --- PPP Dial-Up: Starting PPP

1037 6.2.0 --- PPP Dial-Up INFO --- PPP Dial-Up: Starting PPP

1038 5.9.0 --- PPP Dial-Up INFO --- Dial-up: Traffic generate

1038 6.0.5 --- PPP Dial-Up INFO --- Dial-up: Traffic generate

1038 6.2.0 --- PPP Dial-Up INFO --- Dial-up: Traffic generate

1039 5.9.0 --- PPP Dial-Up INFO --- Dial-up: Session initiateddata packet

1039 6.0.5 --- PPP Dial-Up INFO --- Dial-up: Session initiateddata packet

1039 6.2.0 --- PPP Dial-Up INFO --- Dial-up: Session initiateddata packet

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 101

HCP

HCP

HCP

l

l

l

from

from

from

start

start

start

ord

ord

1040 5.9.0 --- DHCP Server ALERT --- DHCP Server: IP conflict detected

1040 6.0.5 --- DHCP Server ALERT --- DHCP Server: IP conflict detected

1040 6.2.0 --- DHCP Server ALERT --- DHCP Server: IP conflict detected

1041 5.9.0 --- DHCP Server ALERT --- DHCP Server: Received Ddecline from client

1041 6.0.5 --- DHCP Server ALERT --- DHCP Server: Received Ddecline from client

1041 6.2.0 --- DHCP Server ALERT --- DHCP Server: Received Ddecline from client

1043 5.9.0 --- Firewall Hardware ERROR 5425 Power supply without redundancy

1043 6.0.5 --- Firewall Hardware ERROR 5425 Power supply without redundancy

1043 6.2.0 --- Firewall Hardware ERROR 5425 Power supply without redundancy

1044 5.9.0 --- High Availability INFO --- Discovered HA %s Firewal

1044 6.0.5 --- High Availability INFO --- Discovered HA %s Firewal

1044 6.2.0 --- High Availability INFO --- Discovered HA %s Firewal

1045 5.9.0 --- Firewall Event INFO --- Diagnostic Auto-restart scheduled for %s minutesnow

1045 6.0.5 --- Firewall Event INFO --- Diagnostic Auto-restart scheduled for %s minutesnow

1045 6.2.0 --- Firewall Event INFO --- Diagnostic Auto-restart scheduled for %s minutesnow

1046 5.9.0 --- Firewall Event INFO --- Diagnostic Auto-restart canceled

1046 6.0.5 --- Firewall Event INFO --- Diagnostic Auto-restart canceled

1046 6.2.0 --- Firewall Event INFO --- Diagnostic Auto-restart canceled

1047 5.9.0 --- Firewall Event INFO --- As per Diagnostic Auto-reconfiguration Request, restarting system

1047 6.0.5 --- Firewall Event INFO --- As per Diagnostic Auto-reconfiguration Request, restarting system

1047 6.2.0 --- Firewall Event INFO --- As per Diagnostic Auto-reconfiguration Request, restarting system

1048 5.9.0 --- Authenticated Access

INFO --- User login denied - passwdoesn't meet constraints

1048 6.0.5 --- Authenticated Access

INFO --- User login denied - passwdoesn't meet constraints

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 102

ord

s)

s)

s)

g itself tive to

g itself tive to

g itself tive to

ting om reempt

ting om reempt

ting om reempt

KAT

1048 6.2.0 --- Authenticated Access

INFO --- User login denied - passwdoesn't meet constraints

1050 5.9.0 User Activity VPN INFO --- VPN policy %s is added

1050 6.0.5 --- VPN INFO --- VPN Policy Added

1050 6.2.0 User Activity VPN INFO --- VPN policy %s is added

1051 5.9.0 User Activity VPN INFO --- VPN policy %s is deleted

1051 6.0.5 --- VPN INFO --- VPN Policy Deleted

1051 6.2.0 User Activity VPN INFO --- VPN policy %s is deleted

1052 5.9.0 User Activity VPN INFO --- VPN policy %s is modified

1052 6.0.5 --- VPN INFO --- VPN Policy Modified

1052 6.2.0 User Activity VPN INFO --- VPN policy %s is modified

1053 5.9.0 --- Firewall Hardware ALERT 5418 PC Card removed.

1053 6.0.5 --- Firewall Hardware ALERT 5418 PC Card removed.

1053 6.2.0 --- Firewall Hardware ALERT 5418 PC Card removed.

1054 5.9.0 --- Firewall Hardware ALERT 5419 PC Card inserted.

1054 6.0.5 --- Firewall Hardware ALERT 5419 PC Card inserted.

1054 6.2.0 --- Firewall Hardware ALERT 5419 PC Card inserted.

1055 5.9.0 --- Firewall Hardware ALERT --- 3G/4G: No SIM detected

1055 6.0.5 --- Firewall Hardware ALERT --- 3G/4G: No SIM detected

1055 6.2.0 --- Firewall Hardware ALERT --- 3G/4G: No SIM detected

1057 5.9.0 --- High Availability INFO --- Peer firewall rebooting (%

1057 6.0.5 --- High Availability INFO --- Peer firewall rebooting (%

1057 6.2.0 --- High Availability INFO --- Peer firewall rebooting (%

1058 5.9.0 --- High Availability INFO --- Primary firewall rebootinas it transitioned from AcStandby while Preempt

1058 6.0.5 --- High Availability INFO --- Primary firewall rebootinas it transitioned from AcStandby while Preempt

1058 6.2.0 --- High Availability INFO --- Primary firewall rebootinas it transitioned from AcStandby while Preempt

1059 5.9.0 --- High Availability INFO --- Secondary firewall rebooitself as it transitioned frActive to Standby while P

1059 6.0.5 --- High Availability INFO --- Secondary firewall rebooitself as it transitioned frActive to Standby while P

1059 6.2.0 --- High Availability INFO --- Secondary firewall rebooitself as it transitioned frActive to Standby while P

1060 5.9.0 --- Crypto Test ERROR --- Crypto SHA1 based DRNGtest failed

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 103

KAT

KAT

o

o

o

ote

ote

ote

e

e

e

t be client

t be client

t be client

failed

failed

failed

%s

%s

%s

1060 6.0.5 --- Crypto Test ERROR --- Crypto SHA1 based DRNGtest failed

1060 6.2.0 --- Crypto Test ERROR --- Crypto SHA1 based DRNGtest failed

1065 5.9.0 Maintenance Firewall Event INFO --- Successfully sent %s file tremote backup server

1065 6.0.5 Maintenance Firewall Event INFO --- Successfully sent %s file tremote backup server

1065 6.2.0 Maintenance Firewall Event INFO --- Successfully sent %s file tremote backup server

1066 5.9.0 Maintenance Firewall Event INFO --- Failed to send file to rembackup server, Error: %s

1066 6.0.5 Maintenance Firewall Event INFO --- Failed to send file to rembackup server, Error: %s

1066 6.2.0 Maintenance Firewall Event INFO --- Failed to send file to rembackup server, Error: %s

1068 5.9.0 --- DHCP Server WARNING --- Multiple DHCP Servers ardetected on network

1068 6.0.5 --- DHCP Server WARNING --- Multiple DHCP Servers ardetected on network

1068 6.2.0 --- DHCP Server WARNING --- Multiple DHCP Servers ardetected on network

1070 5.9.0 --- Firewall Event INFO --- Invalid DNS Server will noaccepted by the dynamic

1070 6.0.5 --- Firewall Event INFO --- Invalid DNS Server will noaccepted by the dynamic

1070 6.2.0 --- Firewall Event INFO --- Invalid DNS Server will noaccepted by the dynamic

1071 5.9.0 --- Firewall Event CRITICAL --- DHCP Server sanity checkpassed %s

1071 6.0.5 --- Firewall Event CRITICAL --- DHCP Server sanity checkpassed %s

1071 6.2.0 --- Firewall Event CRITICAL --- DHCP Server sanity checkpassed %s

1072 5.9.0 --- Firewall Event CRITICAL --- DHCP Server sanity check%s

1072 6.0.5 --- Firewall Event CRITICAL --- DHCP Server sanity check%s

1072 6.2.0 --- Firewall Event CRITICAL --- DHCP Server sanity check%s

1073 5.9.0 User Activity CIA WARNING --- SSO agent returned error

1073 6.0.5 User Activity CIA WARNING --- SSO agent returned error

1073 6.2.0 User Activity CIA WARNING --- SSO agent returned error

1074 5.9.0 --- L2TP Client INFO --- L2TP Tunnel Negotiation

1074 6.0.5 --- L2TP Client INFO --- L2TP Tunnel Negotiation

1074 6.2.0 --- L2TP Client INFO --- L2TP Tunnel Negotiation

1075 5.9.0 User Activity CIA ALERT --- SSO agent is down

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 104

r login

r login

r login

ith orithm

ith orithm

ith orithm

led by

led by

led by

led by

led by

led by

1075 6.0.5 User Activity CIA ALERT --- SSO agent is down

1075 6.2.0 User Activity CIA ALERT --- SSO agent is down

1076 5.9.0 User Activity CIA ALERT --- SSO agent is up

1076 6.0.5 User Activity CIA ALERT --- SSO agent is up

1076 6.2.0 User Activity CIA ALERT --- SSO agent is up

1077 5.9.0 --- SonicPoint-N INFO --- SonicPoint-N Status

1077 6.0.5 --- SonicPoint-N INFO --- SonicPoint-N Status

1077 6.2.0 --- SonicPoint-N INFO --- SonicPoint-N Status

1078 5.9.0 --- SonicPoint-N INFO --- SonicPoint-N Provision

1078 6.0.5 --- SonicPoint-N INFO --- SonicPoint-N Provision

1078 6.2.0 --- SonicPoint-N INFO --- SonicPoint-N Provision

1079 5.9.0 --- SSL VPN INFO --- %s

1079 6.0.5 --- SSL VPN INFO --- %s

1079 6.2.0 --- SSL VPN INFO --- %s

1080 5.9.0 --- Authenticated Access

INFO --- SSL VPN zone remote useallowed

1080 6.0.5 --- Authenticated Access

INFO --- SSL VPN zone remote useallowed

1080 6.2.0 --- Authenticated Access

INFO --- SSL VPN zone remote useallowed

1081 5.9.0 Blocked Sites Network Access INFO --- SSL Control: Certificate wMD5 Digest Signature Alg

1081 6.0.5 Blocked Sites Network Access INFO --- SSL Control: Certificate wMD5 Digest Signature Alg

1081 6.2.0 Blocked Sites Network Access INFO --- SSL Control: Certificate wMD5 Digest Signature Alg

1082 5.9.0 --- Anti-Spam WARNING 13801 %s is operational.

1082 6.0.5 --- Anti-Spam WARNING 13801 %s is operational.

1082 6.2.0 --- Anti-Spam WARNING 13801 %s is operational.

1083 5.9.0 --- Anti-Spam WARNING 13802 %s is unavailable.

1083 6.0.5 --- Anti-Spam WARNING 13802 %s is unavailable.

1083 6.2.0 --- Anti-Spam WARNING 13802 %s is unavailable.

1084 5.9.0 --- Anti-Spam INFO 13803 Anti-Spam service is enabadministrator.

1084 6.0.5 --- Anti-Spam INFO 13803 Anti-Spam service is enabadministrator.

1084 6.2.0 --- Anti-Spam INFO 13803 Anti-Spam service is enabadministrator.

1085 5.9.0 --- Anti-Spam INFO 13804 Anti-Spam service is disabadministrator.

1085 6.0.5 --- Anti-Spam INFO 13804 Anti-Spam service is disabadministrator.

1085 6.2.0 --- Anti-Spam INFO 13804 Anti-Spam service is disabadministrator.

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 105

.

.

.

ropped.

ropped.

ropped.

e - %s

e - %s

e - %s

ure - %s

ure - %s

ure - %s

HCP relay

HCP relay

HCP relay

GRID-ed

GRID-ed

GRID-ed

GRID-ed

GRID-ed

GRID-ed

ect List

ect List

ect List

fied for

1086 5.9.0 --- Anti-Spam WARNING 13805 Your Anti-Spam Service subscRIPtion has expired

1086 6.0.5 --- Anti-Spam WARNING 13805 Your Anti-Spam Service subscRIPtion has expired

1086 6.2.0 --- Anti-Spam WARNING 13805 Your Anti-Spam Service subscRIPtion has expired

1087 5.9.0 --- Anti-Spam WARNING 13806 SMTP connection limit is reached. Connection is d

1087 6.0.5 --- Anti-Spam WARNING 13806 SMTP connection limit is reached. Connection is d

1087 6.2.0 --- Anti-Spam WARNING 13806 SMTP connection limit is reached. Connection is d

1088 5.9.0 --- Anti-Spam WARNING 13807 Anti-Spam Startup Failur

1088 6.0.5 --- Anti-Spam WARNING 13807 Anti-Spam Startup Failur

1088 6.2.0 --- Anti-Spam WARNING 13807 Anti-Spam Startup Failur

1089 5.9.0 --- Anti-Spam WARNING 13808 Anti-Spam Teardown Fail

1089 6.0.5 --- Anti-Spam WARNING 13808 Anti-Spam Teardown Fail

1089 6.2.0 --- Anti-Spam WARNING 13808 Anti-Spam Teardown Fail

1090 5.9.0 --- DHCP Server NOTICE --- DHCP Server: Received Dmessage from untrusted agent

1090 6.0.5 --- DHCP Server NOTICE --- DHCP Server: Received Dmessage from untrusted agent

1090 6.2.0 --- DHCP Server NOTICE --- DHCP Server: Received Dmessage from untrusted agent

1091 5.9.0 --- Anti-Spam NOTICE 13809 Outbound connection to listed SMTP server dropp

1091 6.0.5 --- Anti-Spam NOTICE 13809 Outbound connection to listed SMTP server dropp

1091 6.2.0 --- Anti-Spam NOTICE 13809 Outbound connection to listed SMTP server dropp

1092 5.9.0 --- Anti-Spam NOTICE 13810 Inbound connection fromlisted SMTP server dropp

1092 6.0.5 --- Anti-Spam NOTICE 13810 Inbound connection fromlisted SMTP server dropp

1092 6.2.0 --- Anti-Spam NOTICE 13810 Inbound connection fromlisted SMTP server dropp

1093 5.9.0 --- Anti-Spam NOTICE 13811 SMTP server found on Rej

1093 6.0.5 --- Anti-Spam NOTICE 13811 SMTP server found on Rej

1093 6.2.0 --- Anti-Spam NOTICE 13811 SMTP server found on Rej

1094 5.9.0 --- Anti-Spam ERROR 13812 No valid DNS server speciGRID lookups

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 106

fied for

fied for

ived P port

ived P port

ived P port

k

k

k

d

d

d

%s

%s

%s

%s

%s

%s

%s

%s

%s

status

status

1094 6.0.5 --- Anti-Spam ERROR 13812 No valid DNS server speciGRID lookups

1094 6.2.0 --- Anti-Spam ERROR 13812 No valid DNS server speciGRID lookups

1095 5.9.0 --- Anti-Spam INFO 13813 Unprocessed E-mail recefrom MTA on Inbound SMT

1095 6.0.5 --- Anti-Spam INFO 13813 Unprocessed E-mail recefrom MTA on Inbound SMT

1095 6.2.0 --- Anti-Spam INFO 13813 Unprocessed E-mail recefrom MTA on Inbound SMT

1097 5.9.0 --- VPN PKI NOTICE --- SCEP Client: %s

1097 6.0.5 --- VPN PKI NOTICE --- SCEP Client: %s

1097 6.2.0 --- VPN PKI NOTICE --- SCEP Client: %s

1098 5.9.0 --- Intrusion Detection

ALERT 6465 Possible DNS rebind attacdetected

1098 6.0.5 --- Intrusion Detection

ALERT 6465 Possible DNS rebind attacdetected

1098 6.2.0 --- Intrusion Detection

ALERT 6465 Possible DNS rebind attacdetected

1099 5.9.0 --- Intrusion Detection

ALERT 6466 DNS rebind attack blocke

1099 6.0.5 --- Intrusion Detection

ALERT 6466 DNS rebind attack blocke

1099 6.2.0 --- Intrusion Detection

ALERT 6466 DNS rebind attack blocke

1100 5.9.0 --- Network Monitor ALERT 14001 Network Monitor: Policy status is UP

1100 6.0.5 --- Network Monitor ALERT 14001 Network Monitor: Policy status is UP

1100 6.2.0 --- Network Monitor ALERT 14001 Network Monitor: Policy status is UP

1101 5.9.0 --- Network Monitor ALERT 14002 Network Monitor: Policy status is DOWN

1101 6.0.5 --- Network Monitor ALERT 14002 Network Monitor: Policy status is DOWN

1101 6.2.0 --- Network Monitor ALERT 14002 Network Monitor: Policy status is DOWN

1102 5.9.0 --- Network Monitor ALERT 14003 Network Monitor: Policy status is UNKNOWN

1102 6.0.5 --- Network Monitor ALERT 14003 Network Monitor: Policy status is UNKNOWN

1102 6.2.0 --- Network Monitor ALERT 14003 Network Monitor: Policy status is UNKNOWN

1103 5.9.0 --- Network Monitor ALERT 14004 Network Monitor: Host %sis UNKNOWN

1103 6.0.5 --- Network Monitor ALERT 14004 Network Monitor: Host %sis UNKNOWN

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 107

status

s

s

s

s

s

s

s

s

s

Time

Time

Time

s sent

s sent

s sent

1103 6.2.0 --- Network Monitor ALERT 14004 Network Monitor: Host %sis UNKNOWN

1104 5.9.0 --- Network Monitor INFO --- Network Monitor Policy %Added

1104 6.0.5 --- Network Monitor INFO --- Network Monitor Policy %Added

1104 6.2.0 --- Network Monitor INFO --- Network Monitor Policy %Added

1105 5.9.0 --- Network Monitor INFO --- Network Monitor Policy %Deleted

1105 6.0.5 --- Network Monitor INFO --- Network Monitor Policy %Deleted

1105 6.2.0 --- Network Monitor INFO --- Network Monitor Policy %Deleted

1106 5.9.0 --- Network Monitor INFO --- Network Monitor Policy %Modified

1106 6.0.5 --- Network Monitor INFO --- Network Monitor Policy %Modified

1106 6.2.0 --- Network Monitor INFO --- Network Monitor Policy %Modified

1107 5.9.0 System Error Firewall Event ALERT --- %s

1107 6.0.5 System Error Firewall Event ALERT --- %s

1107 6.2.0 System Error Firewall Event ALERT --- %s

1108 5.9.0 --- Anti-Spam INFO --- Message blocked by Real-E-mail Scanner

1108 6.0.5 --- Anti-Spam INFO --- Message blocked by Real-E-mail Scanner

1108 6.2.0 --- Anti-Spam INFO --- Message blocked by Real-E-mail Scanner

1109 5.9.0 --- VPN PKI INFO --- CSR Generation: %s

1109 6.0.5 --- VPN PKI INFO --- CSR Generation: %s

1109 6.2.0 --- VPN PKI INFO --- CSR Generation: %s

1110 5.9.0 --- DHCP Server INFO --- Assigned IP address %s

1110 6.0.5 --- DHCP Server INFO --- Assigned IP address %s

1110 6.2.0 --- DHCP Server INFO --- Assigned IP address %s

1111 5.9.0 --- DHCP Server INFO --- Released IP address %s

1111 6.0.5 --- DHCP Server INFO --- Released IP address %s

1111 6.2.0 --- DHCP Server INFO --- Released IP address %s

1112 5.9.0 --- FTP DEBUG --- FTP server accepted the connection

1112 6.0.5 --- FTP DEBUG --- FTP server accepted the connection

1112 6.2.0 --- FTP DEBUG --- FTP server accepted the connection

1113 5.9.0 --- FTP DEBUG --- FTP client user name wa

1113 6.0.5 --- FTP DEBUG --- FTP client user name wa

1113 6.2.0 --- FTP DEBUG --- FTP client user name wa

1114 5.9.0 --- FTP DEBUG --- FTP client user logged insuccessfully

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 108

failed

failed

failed

t

t

t

robe

robe

robe

P

P

P

ne ddress ser

ne ddress ser

ne ddress ser

nal

nal

nal

nal lution

nal lution

nal lution

1114 6.0.5 --- FTP DEBUG --- FTP client user logged insuccessfully

1114 6.2.0 --- FTP DEBUG --- FTP client user logged insuccessfully

1115 5.9.0 --- FTP DEBUG --- FTP client user logged in

1115 6.0.5 --- FTP DEBUG --- FTP client user logged in

1115 6.2.0 --- FTP DEBUG --- FTP client user logged in

1116 5.9.0 --- FTP DEBUG --- FTP client user logged ou

1116 6.0.5 --- FTP DEBUG --- FTP client user logged ou

1116 6.2.0 --- FTP DEBUG --- FTP client user logged ou

1117 5.9.0 User Activity Authenticated Access

WARNING --- User login denied - SSO pfailed

1117 6.0.5 User Activity Authenticated Access

WARNING --- User login denied - SSO pfailed

1117 6.2.0 User Activity Authenticated Access

WARNING --- User login denied - SSO pfailed

1118 5.9.0 User Activity Authenticated Access

INFO --- User login denied - Mail Address(From/to) or SMTServer is not configured

1118 6.0.5 User Activity Authenticated Access

INFO --- User login denied - Mail Address(From/to) or SMTServer is not configured

1118 6.2.0 User Activity Authenticated Access

INFO --- User login denied - Mail Address(From/to) or SMTServer is not configured

1119 5.9.0 User Activity Authenticated Access

INFO --- RADIUS user cannot use OTime Password - no mail aset for equivalent local u

1119 6.0.5 User Activity Authenticated Access

INFO --- RADIUS user cannot use OTime Password - no mail aset for equivalent local u

1119 6.2.0 User Activity Authenticated Access

INFO --- RADIUS user cannot use OTime Password - no mail aset for equivalent local u

1120 5.9.0 User Activity Authenticated Access

WARNING --- User login denied - TermiServices agent Timeout

1120 6.0.5 User Activity Authenticated Access

WARNING --- User login denied - TermiServices agent Timeout

1120 6.2.0 User Activity Authenticated Access

WARNING --- User login denied - TermiServices agent Timeout

1121 5.9.0 User Activity Authenticated Access

WARNING --- User login denied - TermiServices agent name resofailed

1121 6.0.5 User Activity Authenticated Access

WARNING --- User login denied - TermiServices agent name resofailed

1121 6.2.0 User Activity Authenticated Access

WARNING --- User login denied - TermiServices agent name resofailed

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 109

me ervices

me ervices

me ervices

nal ation

nal ation

nal ation

vices

vices

vices

s) are

s) are

s) are

itoring ace %s

itoring ace %s

itoring ace %s

1122 5.9.0 User Activity Authenticated Access

WARNING --- User login denied - No nareceived from Terminal Sagent

1122 6.0.5 User Activity Authenticated Access

WARNING --- User login denied - No nareceived from Terminal Sagent

1122 6.2.0 User Activity Authenticated Access

WARNING --- User login denied - No nareceived from Terminal Sagent

1123 5.9.0 User Activity Authenticated Access

WARNING --- User login denied - TermiServices agent communicproblem

1123 6.0.5 User Activity Authenticated Access

WARNING --- User login denied - TermiServices agent communicproblem

1123 6.2.0 User Activity Authenticated Access

WARNING --- User login denied - TermiServices agent communicproblem

1124 5.9.0 User Activity Authenticated Access

INFO --- User logged out - logout reported by Terminal Seragent

1124 6.0.5 User Activity Authenticated Access

INFO --- User logged out - logout reported by Terminal Seragent

1124 6.2.0 User Activity Authenticated Access

INFO --- User logged out - logout reported by Terminal Seragent

1125 5.9.0 User Activity High Availability INFO --- High Availability has beenenabled, Dial-Up device(not supported in High Availability processing.

1125 6.0.5 --- High Availability INFO --- High Availability has beenenabled, Dial-Up device(not supported in High Availability processing.

1125 6.2.0 User Activity High Availability INFO --- High Availability has beenenabled, Dial-Up device(not supported in High Availability processing.

1126 5.9.0 User Activity High Availability ERROR --- The High Availability monIP configuration of Interfis incorrect.

1126 6.0.5 --- High Availability ERROR --- The High Availability monIP configuration of Interfis incorrect.

1126 6.2.0 User Activity High Availability ERROR --- The High Availability monIP configuration of Interfis incorrect.

1127 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: ESP modemismatch Local - TunnelRemote - Transport

1127 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: ESP modemismatch Local - TunnelRemote - Transport

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 110

ort

ort

ort

%s

%s

%s

%s

%s

%s

d GRID

d GRID

d GRID

er

er

er

or GRID

or GRID

or GRID

ID List

ID List

ID List

1127 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: ESP modemismatch Local - TunnelRemote - Transport

1128 5.9.0 User Activity VPN IKE WARNING --- IKE Responder: ESP modemismatch Local - TranspRemote - Tunnel

1128 6.0.5 User Activity VPN IKE WARNING --- IKE Responder: ESP modemismatch Local - TranspRemote - Tunnel

1128 6.2.0 User Activity VPN IKE WARNING --- IKE Responder: ESP modemismatch Local - TranspRemote - Tunnel

1131 5.9.0 --- Anti-Spam DEBUG --- Probe Response Success -

1131 6.0.5 --- Anti-Spam DEBUG --- Probe Response Success -

1131 6.2.0 --- Anti-Spam DEBUG --- Probe Response Success -

1132 5.9.0 --- Anti-Spam DEBUG --- Probe Response Failure -

1132 6.0.5 --- Anti-Spam DEBUG --- Probe Response Failure -

1132 6.2.0 --- Anti-Spam DEBUG --- Probe Response Failure -

1133 5.9.0 --- PPPoE INFO --- %s

1133 6.0.5 --- PPPoE INFO --- %s

1133 6.2.0 --- PPPoE INFO --- %s

1134 5.9.0 Maintenance PPTP INFO --- %s

1134 6.0.5 Maintenance PPTP INFO --- %s

1134 6.2.0 Maintenance PPTP INFO --- %s

1135 5.9.0 Maintenance L2TP Client INFO --- %s

1135 6.0.5 Maintenance L2TP Client INFO --- %s

1135 6.2.0 Maintenance L2TP Client INFO --- %s

1138 5.9.0 --- Anti-Spam DEBUG --- Received unauthenticateresponse

1138 6.0.5 --- Anti-Spam DEBUG --- Received unauthenticateresponse

1138 6.2.0 --- Anti-Spam DEBUG --- Received unauthenticateresponse

1139 5.9.0 --- Anti-Spam DEBUG --- Invalid key or serial numbused for GRID response

1139 6.0.5 --- Anti-Spam DEBUG --- Invalid key or serial numbused for GRID response

1139 6.2.0 --- Anti-Spam DEBUG --- Invalid key or serial numbused for GRID response

1140 5.9.0 --- Anti-Spam DEBUG --- Invalid key version used fresponse

1140 6.0.5 --- Anti-Spam DEBUG --- Invalid key version used fresponse

1140 6.2.0 --- Anti-Spam DEBUG --- Invalid key version used fresponse

1141 5.9.0 --- Anti-Spam DEBUG --- Host IP address not in GR

1141 6.0.5 --- Anti-Spam DEBUG --- Host IP address not in GR

1141 6.2.0 --- Anti-Spam DEBUG --- Host IP address not in GR

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 111

m DNS

m DNS

m DNS

o GRID

o GRID

o GRID

s - %s

s - %s

s - %s

ring .

ring .

ring .

s down

s down

s down

s up

s up

s up

1142 5.9.0 --- Anti-Spam DEBUG --- No response received froserver

1142 6.0.5 --- Anti-Spam DEBUG --- No response received froserver

1142 6.2.0 --- Anti-Spam DEBUG --- No response received froserver

1143 5.9.0 --- Anti-Spam DEBUG --- Not blacklisted as per configuration

1143 6.0.5 --- Anti-Spam DEBUG --- Not blacklisted as per configuration

1143 6.2.0 --- Anti-Spam DEBUG --- Not blacklisted as per configuration

1144 5.9.0 --- Anti-Spam DEBUG --- Default to not blacklisted

1144 6.0.5 --- Anti-Spam DEBUG --- Default to not blacklisted

1144 6.2.0 --- Anti-Spam DEBUG --- Default to not blacklisted

1145 5.9.0 --- Anti-Spam DEBUG --- Failed to insert entry intresult IP cached table

1145 6.0.5 --- Anti-Spam DEBUG --- Failed to insert entry intresult IP cached table

1145 6.2.0 --- Anti-Spam DEBUG --- Failed to insert entry intresult IP cached table

1146 5.9.0 --- Anti-Spam DEBUG --- Resolved ES Cloud - %s

1146 6.0.5 --- Anti-Spam DEBUG --- Resolved ES Cloud - %s

1146 6.2.0 --- Anti-Spam DEBUG --- Resolved ES Cloud - %s

1147 5.9.0 --- Anti-Spam DEBUG --- Updated ES Cloud Addres

1147 6.0.5 --- Anti-Spam DEBUG --- Updated ES Cloud Addres

1147 6.2.0 --- Anti-Spam DEBUG --- Updated ES Cloud Addres

1148 5.9.0 Advanced Switching

Advanced Switching

INFO --- %s

1148 6.0.5 --- Advanced Switching

INFO --- %s

1148 6.2.0 Advanced Switching

Advanced Switching

INFO --- %s

1149 5.9.0 --- High Availability WARNING --- Your Active/Active ClustesubscRIPtion has expired

1149 6.0.5 --- High Availability WARNING --- Your Active/Active ClustesubscRIPtion has expired

1149 6.2.0 --- High Availability WARNING --- Your Active/Active ClustesubscRIPtion has expired

1150 5.9.0 User Activity CIA ALERT --- Terminal Services agent i

1150 6.0.5 User Activity CIA ALERT --- Terminal Services agent i

1150 6.2.0 User Activity CIA ALERT --- Terminal Services agent i

1151 5.9.0 User Activity CIA ALERT --- Terminal Services agent i

1151 6.0.5 User Activity CIA ALERT --- Terminal Services agent i

1151 6.2.0 User Activity CIA ALERT --- Terminal Services agent i

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 112

license llowing

license llowing

license llowing

ction

ction

ction

ntion

ntion

ntion

og or

og or

og or

and

and

and

and

and

and

1152 5.9.0 --- High Availability ERROR --- Active/Active Clustering is not activated on the focluster units: %s

1152 6.0.5 --- High Availability ERROR --- Active/Active Clustering is not activated on the focluster units: %s

1152 6.2.0 --- High Availability ERROR --- Active/Active Clustering is not activated on the focluster units: %s

1153 5.9.0 Connection Traffic

SSL VPN INFO --- SSL VPN Traffic

1153 6.0.5 Connection Traffic

SSL VPN INFO --- SSL VPN Traffic

1153 6.2.0 Connection Traffic

SSL VPN INFO --- SSL VPN Traffic

1154 5.9.0 --- Application Control Detection

ALERT 15001 Application Control DeteAlert: %s

1154 6.0.5 --- Application Control Detection

ALERT 15001 Application Control DeteAlert: %s

1154 6.2.0 --- Application Control Detection

ALERT 15001 Application Control DeteAlert: %s

1155 5.9.0 --- Application Control Detection

ALERT 15002 Application Control PreveAlert: %s

1155 6.0.5 --- Application Control Detection

ALERT 15002 Application Control PreveAlert: %s

1155 6.2.0 --- Application Control Detection

ALERT 15002 Application Control PreveAlert: %s

1156 5.9.0 --- Firewall Event ERROR --- Name Resolution for SyslGMS failed.

1156 6.0.5 --- Firewall Event ERROR --- Name Resolution for SyslGMS failed.

1156 6.2.0 --- Firewall Event ERROR --- Name Resolution for SyslGMS failed.

1157 5.9.0 User Activity Authenticated Access

INFO --- User account '%s' expireddisabled

1157 6.0.5 User Activity Authenticated Access

INFO --- User account '%s' expireddisabled

1157 6.2.0 User Activity Authenticated Access

INFO --- User account '%s' expireddisabled

1158 5.9.0 User Activity Authenticated Access

INFO --- User account '%s' expiredpruned

1158 6.0.5 User Activity Authenticated Access

INFO --- User account '%s' expiredpruned

1158 6.2.0 User Activity Authenticated Access

INFO --- User account '%s' expiredpruned

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 113

.

.

.

te

te

te

not

not

not

nits do

nits do

nits do

signal

signal

signal

frame

frame

frame

on

on

on

ote

ote

1159 5.9.0 --- Security Services WARNING --- Received Alert: Your Visualization Control subscRIPtion has expired

1159 6.0.5 --- Security Services WARNING --- Received Alert: Your Visualization Control subscRIPtion has expired

1159 6.2.0 --- Security Services WARNING --- Received Alert: Your Visualization Control subscRIPtion has expired

1160 5.9.0 Maintenance Firewall Event DEBUG --- Attempt to contact Remobackup server for uploadapproval failed

1160 6.0.5 Maintenance Firewall Event DEBUG --- Attempt to contact Remobackup server for uploadapproval failed

1160 6.2.0 Maintenance Firewall Event DEBUG --- Attempt to contact Remobackup server for uploadapproval failed

1161 5.9.0 Maintenance Firewall Event DEBUG --- Backup remote server didapprove upload Request

1161 6.0.5 Maintenance Firewall Event DEBUG --- Backup remote server didapprove upload Request

1161 6.2.0 Maintenance Firewall Event DEBUG --- Backup remote server didapprove upload Request

1162 5.9.0 System Error High Availability ALERT 664 Modules attached to HA unot match: %s

1162 6.0.5 System Error High Availability ALERT 664 Modules attached to HA unot match: %s

1162 6.2.0 System Error High Availability ALERT 664 Modules attached to HA unot match: %s

1163 5.9.0 --- E1/T1 Status INFO --- E1_T1 Layer 1 status: No

1163 6.0.5 --- None INFO --- E1_T1 Layer 1 status: No

1163 6.2.0 --- E1/T1 Status INFO --- E1_T1 Layer 1 status: No

1164 5.9.0 --- E1/T1 Status INFO --- E1_T1 Layer 1 status: Nosynchronization

1164 6.0.5 --- None INFO --- E1_T1 Layer 1 status: Nosynchronization

1164 6.2.0 --- E1/T1 Status INFO --- E1_T1 Layer 1 status: Nosynchronization

1165 5.9.0 --- E1/T1 Status INFO --- E1_T1 Layer 1 status: Nomultiframe synchronizati

1165 6.0.5 --- None INFO --- E1_T1 Layer 1 status: Nomultiframe synchronizati

1165 6.2.0 --- E1/T1 Status INFO --- E1_T1 Layer 1 status: Nomultiframe synchronizati

1166 5.9.0 --- E1/T1 Status INFO --- E1_T1 Layer 1 status: Remalarm detected

1166 6.0.5 --- None INFO --- E1_T1 Layer 1 status: Remalarm detected

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 114

ote

trolled

trolled

trolled

%s

%s

%s

%s is

%s is

%s is

%s is

%s is

%s is

%s is

%s is

%s is

%s is

%s is

%s is

n g to

n g to

1166 6.2.0 --- E1/T1 Status INFO --- E1_T1 Layer 1 status: Remalarm detected

1167 5.9.0 --- E1/T1 Status INFO --- E1_T1 Layer 1 status: Conslip

1167 6.0.5 --- None INFO --- E1_T1 Layer 1 status: Conslip

1167 6.2.0 --- E1/T1 Status INFO --- E1_T1 Layer 1 status: Conslip

1168 5.9.0 --- E1/T1 Status INFO --- E1_T1 Layer 1 status: OK

1168 6.0.5 --- None INFO --- E1_T1 Layer 1 status: OK

1168 6.2.0 --- E1/T1 Status INFO --- E1_T1 Layer 1 status: OK

1169 5.9.0 --- Bandwidth Optimization

INFO --- WAN Acceleration devicefound

1169 6.0.5 --- Unused DEBUG --- WAN Acceleration devicefound

1169 6.2.0 --- Bandwidth Optimization

INFO --- WAN Acceleration devicefound

1170 5.9.0 --- Bandwidth Optimization

ALERT --- WAN Acceleration deviceoperational

1170 6.0.5 --- Unused DEBUG --- WAN Acceleration deviceoperational

1170 6.2.0 --- Bandwidth Optimization

ALERT --- WAN Acceleration deviceoperational

1171 5.9.0 --- Bandwidth Optimization

ALERT --- WAN Acceleration deviceno longer operational

1171 6.0.5 --- Unused DEBUG --- WAN Acceleration deviceno longer operational

1171 6.2.0 --- Bandwidth Optimization

ALERT --- WAN Acceleration deviceno longer operational

1172 5.9.0 --- Bandwidth Optimization

ALERT --- WAN Acceleration devicebeing used

1172 6.0.5 --- Unused DEBUG --- WAN Acceleration devicebeing used

1172 6.2.0 --- Bandwidth Optimization

ALERT --- WAN Acceleration devicebeing used

1173 5.9.0 --- Bandwidth Optimization

ALERT --- WAN Acceleration deviceno longer being used

1173 6.0.5 --- Unused DEBUG --- WAN Acceleration deviceno longer being used

1173 6.2.0 --- Bandwidth Optimization

ALERT --- WAN Acceleration deviceno longer being used

1174 5.9.0 --- Bandwidth Optimization

WARNING --- Remote WAN Acceleratiodevice stopped respondinprobes

1174 6.0.5 --- Unused DEBUG --- Remote WAN Acceleratiodevice stopped respondinprobes

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 115

n g to

n g to

n g to

n g to

rvice .

rvice .

rvice .

tected

tected

tected

system aiting

system aiting

system aiting

ber of SO

ber of SO

ber of SO

2)

2)

2)

use s DHCP

use s DHCP

use s DHCP

1174 6.2.0 --- Bandwidth Optimization

WARNING --- Remote WAN Acceleratiodevice stopped respondinprobes

1175 5.9.0 --- Bandwidth Optimization

WARNING --- Remote WAN Acceleratiodevice started respondinprobes

1175 6.0.5 --- Unused DEBUG --- Remote WAN Acceleratiodevice started respondinprobes

1175 6.2.0 --- Bandwidth Optimization

WARNING --- Remote WAN Acceleratiodevice started respondinprobes

1176 5.9.0 --- Bandwidth Optimization

WARNING --- Your WAN Acceleration SesubscRIPtion has expired

1176 6.0.5 --- Unused DEBUG --- Your WAN Acceleration SesubscRIPtion has expired

1176 6.2.0 --- Bandwidth Optimization

WARNING --- Your WAN Acceleration SesubscRIPtion has expired

1177 5.9.0 Debug Network Access ALERT --- Malformed DNS packet de

1177 6.0.5 Debug Network Access ALERT --- Malformed DNS packet de

1177 6.2.0 Debug Network Access ALERT --- Malformed DNS packet de

1178 5.9.0 User Activity CIA ALERT --- A high percentage of the packet buffers are held wfor SSO

1178 6.0.5 User Activity CIA ALERT --- A high percentage of the packet buffers are held wfor SSO

1178 6.2.0 User Activity CIA ALERT --- A high percentage of the packet buffers are held wfor SSO

1179 5.9.0 User Activity CIA ALERT --- A user has a very high numconnections waiting for S

1179 6.0.5 User Activity CIA ALERT --- A user has a very high numconnections waiting for S

1179 6.2.0 User Activity CIA ALERT --- A user has a very high numconnections waiting for S

1183 5.9.0 --- VPN IKE DEBUG --- Deleting IPsec SA. (Phase

1183 6.0.5 --- VPN IKE DEBUG --- Deleting IPsec SA. (Phase

1183 6.2.0 --- VPN IKE DEBUG --- Deleting IPsec SA. (Phase

1184 5.9.0 --- DHCP Server WARNING --- Delete invalid scope becaport IP in the range of thiscope.

1184 6.0.5 --- DHCP Server WARNING --- Delete invalid scope becaport IP in the range of thiscope.

1184 6.2.0 --- DHCP Server WARNING --- Delete invalid scope becaport IP in the range of thiscope.

1185 5.9.0 --- DSL ALERT --- DSL: %s Device Up

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 116

g

g

g

posed VPN

posed VPN

posed VPN

ser

ser

ser

group:

group:

group:

an

an

an

an

an

an

rface

rface

1185 6.0.5 --- DSL ALERT --- DSL: %s Device Up

1185 6.2.0 --- DSL ALERT --- DSL: %s Device Up

1186 5.9.0 --- DSL ALERT --- DSL: %s Device Down

1186 6.0.5 --- DSL ALERT --- DSL: %s Device Down

1186 6.2.0 --- DSL ALERT --- DSL: %s Device Down

1187 5.9.0 --- DSL ALERT --- DSL: %s WAN is connected

1187 6.0.5 --- DSL ALERT --- DSL: %s WAN is connected

1187 6.2.0 --- DSL ALERT --- DSL: %s WAN is connected

1188 5.9.0 --- DSL ALERT --- DSL: %s WAN is initializin

1188 6.0.5 --- DSL ALERT --- DSL: %s WAN is initializin

1188 6.2.0 --- DSL ALERT --- DSL: %s WAN is initializin

1189 5.9.0 --- VPN IKE WARNING --- IKE Responder: Peer's pronetwork does not match Policy's Network

1189 6.0.5 --- VPN IKE WARNING --- IKE Responder: Peer's pronetwork does not match Policy's Network

1189 6.2.0 --- VPN IKE WARNING --- IKE Responder: Peer's pronetwork does not match Policy's Network

1190 5.9.0 --- RADIUS INFO --- Added new LDAP mirror ugroup: %s

1190 6.0.5 --- RADIUS INFO --- Added new LDAP mirror ugroup: %s

1190 6.2.0 --- RADIUS INFO --- Added new LDAP mirror ugroup: %s

1191 5.9.0 --- RADIUS INFO --- Deleted LDAP mirror user%s

1191 6.0.5 --- RADIUS INFO --- Deleted LDAP mirror user%s

1191 6.2.0 --- RADIUS INFO --- Deleted LDAP mirror user%s

1192 5.9.0 --- RADIUS INFO --- Added a new member to LDAP mirror user group

1192 6.0.5 --- RADIUS INFO --- Added a new member to LDAP mirror user group

1192 6.2.0 --- RADIUS INFO --- Added a new member to LDAP mirror user group

1193 5.9.0 --- RADIUS INFO --- Removed a member fromLDAP mirror user group

1193 6.0.5 --- RADIUS INFO --- Removed a member fromLDAP mirror user group

1193 6.2.0 --- RADIUS INFO --- Removed a member fromLDAP mirror user group

1194 5.9.0 --- High Availability ERROR --- Monitoring probe out intemismatch %s

1194 6.0.5 --- High Availability ERROR --- Monitoring probe out intemismatch %s

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 117

rface

wall n has

wall n has

wall n has

s

s

s

cked:

cked:

cked:

r

r

r

der

der

der

1194 6.2.0 --- High Availability ERROR --- Monitoring probe out intemismatch %s

1195 5.9.0 Security Services

Security Services WARNING --- Received Alert: Your FireBotnet Filter subscRIPtioexpired.

1195 6.0.5 Security Services

Security Services WARNING --- Received Alert: Your FireBotnet Filter subscRIPtioexpired.

1195 6.2.0 Security Services

Security Services WARNING --- Received Alert: Your FireBotnet Filter subscRIPtioexpired.

1196 5.9.0 Maintenance Firewall Event ALERT --- Product maximum entriereached - %s

1196 6.0.5 Maintenance Firewall Event ALERT --- Product maximum entriereached - %s

1196 6.2.0 Maintenance Firewall Event ALERT --- Product maximum entriereached - %s

1197 5.9.0 --- Network Access NOTICE --- Nat Mapping

1197 6.0.5 --- Network Access NOTICE --- Nat Mapping

1197 6.2.0 --- Network Access NOTICE --- Nat Mapping

1198 5.9.0 --- GeoIP ALERT --- Initiator from country blo%s

1198 6.0.5 --- GeoIP ALERT --- Initiator from country blo%s

1198 6.2.0 --- GeoIP ALERT --- Initiator from country blo%s

1199 5.9.0 --- GeoIP ALERT --- Responder from country blocked: %s

1199 6.0.5 --- GeoIP ALERT --- Responder from country blocked: %s

1199 6.2.0 --- GeoIP ALERT --- Responder from country blocked: %s

1200 5.9.0 --- Botnet ALERT --- Suspected Botnet initiatoblocked: %s

1200 6.0.5 --- Botnet ALERT --- Suspected Botnet initiatoblocked: %s

1200 6.2.0 --- Botnet ALERT --- Suspected Botnet initiatoblocked: %s

1201 5.9.0 --- Botnet ALERT --- Suspected Botnet responblocked: %s

1201 6.0.5 --- Botnet ALERT --- Suspected Botnet responblocked: %s

1201 6.2.0 --- Botnet ALERT --- Suspected Botnet responblocked: %s

1202 5.9.0 User Activity Authenticated Access

INFO --- %s

1202 6.0.5 User Activity Authenticated Access

INFO --- %s

1202 6.2.0 User Activity Authenticated Access

INFO --- %s

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 118

rface

rface

rface

rface

rface

rface

link r, it

link r, it

link r, it

nt link r, it

nt link r, it

nt link r, it

1203 5.9.0 User Activity Authenticated Access

WARNING --- %s

1203 6.0.5 User Activity Authenticated Access

WARNING --- %s

1203 6.2.0 User Activity Authenticated Access

WARNING --- %s

1204 5.9.0 User Activity Authenticated Access

ERROR --- %s

1204 6.0.5 User Activity Authenticated Access

ERROR --- %s

1204 6.2.0 User Activity Authenticated Access

ERROR --- %s

1205 5.9.0 System Error High Availability ALERT --- On HA peer firewall, Inte%s Link Is Up

1205 6.0.5 System Error High Availability ALERT --- On HA peer firewall, Inte%s Link Is Up

1205 6.2.0 System Error High Availability ALERT --- On HA peer firewall, Inte%s Link Is Up

1206 5.9.0 System Error High Availability ALERT --- On HA peer firewall, Inte%s Link Is Down

1206 6.0.5 System Error High Availability ALERT --- On HA peer firewall, Inte%s Link Is Down

1206 6.2.0 System Error High Availability ALERT --- On HA peer firewall, Inte%s Link Is Down

1207 5.9.0 Maintenance High Availability INFO --- Peer firewall has reducedstatus. In event of failovewill operate with limitedcapability.

1207 6.0.5 Maintenance High Availability INFO --- Peer firewall has reducedstatus. In event of failovewill operate with limitedcapability.

1207 6.2.0 Maintenance High Availability INFO --- Peer firewall has reducedstatus. In event of failovewill operate with limitedcapability.

1208 5.9.0 Maintenance High Availability INFO --- Peer firewall has equivalestatus. In event of failovewill operate with equal capability.

1208 6.0.5 Maintenance High Availability INFO --- Peer firewall has equivalestatus. In event of failovewill operate with equal capability.

1208 6.2.0 Maintenance High Availability INFO --- Peer firewall has equivalestatus. In event of failovewill operate with equal capability.

1209 5.9.0 Attack MacIP Spoof ALERT --- MAC-IP Anti-spoof check enforced for hosts

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 119

not

not

not

found,

found,

found,

found, e

found, e

found, e

k

k

k

om

om

om

is Full

is Full

is Full

is Not

1209 6.0.5 Attack MacIP Spoof ALERT --- MAC-IP Anti-spoof check enforced for hosts

1209 6.2.0 Attack MacIP Spoof ALERT --- MAC-IP Anti-spoof check enforced for hosts

1210 5.9.0 Attack MacIP Spoof ALERT --- MAC-IP Anti-spoof cache found for this router

1210 6.0.5 Attack MacIP Spoof ALERT --- MAC-IP Anti-spoof cache found for this router

1210 6.2.0 Attack MacIP Spoof ALERT --- MAC-IP Anti-spoof cache found for this router

1211 5.9.0 Attack MacIP Spoof ALERT --- MAC-IP Anti-spoof cache but it is not a router

1211 6.0.5 Attack MacIP Spoof ALERT --- MAC-IP Anti-spoof cache but it is not a router

1211 6.2.0 Attack MacIP Spoof ALERT --- MAC-IP Anti-spoof cache but it is not a router

1212 5.9.0 Attack MacIP Spoof ALERT --- MAC-IP Anti-spoof cache but it is blacklisted devic

1212 6.0.5 Attack MacIP Spoof ALERT --- MAC-IP Anti-spoof cache but it is blacklisted devic

1212 6.2.0 Attack MacIP Spoof ALERT --- MAC-IP Anti-spoof cache but it is blacklisted devic

1213 5.9.0 Attack Intrusion Detection

ALERT --- Possible UDP flood attackdetected

1213 6.0.5 Attack Intrusion Detection

ALERT --- Possible UDP flood attackdetected

1213 6.2.0 Attack Intrusion Detection

ALERT --- Possible UDP flood attackdetected

1214 5.9.0 Attack Intrusion Detection

ALERT --- Possible ICMP flood attacdetected

1214 6.0.5 Attack Intrusion Detection

ALERT --- Possible ICMP flood attacdetected

1214 6.2.0 Attack Intrusion Detection

ALERT --- Possible ICMP flood attacdetected

1215 5.9.0 Debug DHCP Relay INFO --- DHCP INFORM received frremote device

1215 6.0.5 Debug DHCP Relay INFO --- DHCP INFORM received frremote device

1215 6.2.0 Debug DHCP Relay INFO --- DHCP INFORM received frremote device

1216 5.9.0 --- --- DEBUG --- IP Pool of the VPN Policy

1216 6.0.5 --- --- DEBUG --- IP Pool of the VPN Policy

1216 6.2.0 --- --- DEBUG --- IP Pool of the VPN Policy

1217 5.9.0 --- --- DEBUG --- IP Pool of the VPN Policy Configured

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 120

is Not

is Not

teway

teway

teway

r Client

r Client

r Client

dow

dow

dow

ded

ded

ded

ss

ss

ss

rom

rom

rom

1217 6.0.5 --- --- DEBUG --- IP Pool of the VPN Policy Configured

1217 6.2.0 --- --- DEBUG --- IP Pool of the VPN Policy Configured

1218 5.9.0 --- --- INFO --- MOBIKE: Update Peer GaIP

1218 6.0.5 --- --- INFO --- MOBIKE: Update Peer GaIP

1218 6.2.0 --- --- INFO --- MOBIKE: Update Peer GaIP

1219 5.9.0 --- --- INFO --- IP Address is allocated fo

1219 6.0.5 --- --- INFO --- IP Address is allocated fo

1219 6.2.0 --- --- INFO --- IP Address is allocated fo

1220 5.9.0 --- --- WARNING --- Invalid SNMP packet

1220 6.0.5 --- --- WARNING --- Invalid SNMP packet

1220 6.2.0 --- --- WARNING --- Invalid SNMP packet

1221 5.9.0 --- --- WARNING --- Invalid SNMPv3 engineID

1221 6.0.5 --- --- WARNING --- Invalid SNMPv3 engineID

1221 6.2.0 --- --- WARNING --- Invalid SNMPv3 engineID

1222 5.9.0 --- --- WARNING --- Invalid SNMPv3 User

1222 6.0.5 --- --- WARNING --- Invalid SNMPv3 User

1222 6.2.0 --- --- WARNING --- Invalid SNMPv3 User

1223 5.9.0 --- --- WARNING --- Invalid SNMPv3 Time Win

1223 6.0.5 --- --- WARNING --- Invalid SNMPv3 Time Win

1223 6.2.0 --- --- WARNING --- Invalid SNMPv3 Time Win

1225 5.9.0 --- --- INFO --- SNMP Packet Dropped

1225 6.0.5 --- --- INFO --- SNMP Packet Dropped

1225 6.2.0 --- --- INFO --- SNMP Packet Dropped

1226 5.9.0 --- --- INFO --- HTTPS Handshake: %s

1226 6.0.5 --- --- INFO --- HTTPS Handshake: %s

1226 6.2.0 --- --- INFO --- HTTPS Handshake: %s

1227 5.9.0 User Activity --- INFO --- Guest traffic quota excee

1227 6.0.5 User Activity --- INFO --- Guest traffic quota excee

1227 6.2.0 User Activity --- INFO --- Guest traffic quota excee

1229 5.9.0 TCP | UDP | ICMP

--- WARNING --- Packet dropped by wireleAdvanced IDP

1229 6.0.5 TCP | UDP | ICMP

--- WARNING --- Packet dropped by wireleAdvanced IDP

1229 6.2.0 TCP | UDP | ICMP

--- WARNING --- Packet dropped by wireleAdvanced IDP

1230 5.9.0 UDP --- NOTICE --- Failed on updating time fNTP server

1230 6.0.5 UDP --- NOTICE --- Failed on updating time fNTP server

1230 6.2.0 UDP --- NOTICE --- Failed on updating time fNTP server

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 121

rver

from

rver

pped

pped

pped

Rules

ctive

ctive

ctive

n - %s

n - %s

n - %s

in - %s

in - %s

in - %s

d with

d with

d with

1231 5.9.0 UDP --- NOTICE --- Time update from NTP sewas successful

1231 6.0.5 UDP --- NOTICE --- Succeed in updating timeNTP server

1231 6.2.0 UDP --- NOTICE --- Time update from NTP sewas successful

1232 5.9.0 UDP --- NOTICE --- NTP Request sent

1232 6.0.5 UDP --- NOTICE --- NTP Request sent

1232 6.2.0 UDP --- NOTICE --- NTP Request sent

1233 5.9.0 Debug --- NOTICE --- Unhandled link-local or multicast IPv6 packet dro

1233 6.0.5 Debug --- ALERT --- Unhandled link-local or multicast IPv6 packet dro

1233 6.2.0 Debug --- NOTICE --- Unhandled link-local or multicast IPv6 packet dro

1235 5.9.0 --- Network INFO --- Packet allowed by Access

1235 6.0.5 --- Network INFO --- Packet allowed

1235 6.2.0 --- Network INFO --- Packet allowed: %s

1236 5.9.0 --- Security Services DEBUG --- Received Blacklisted Direfrom - %s

1236 6.0.5 --- Security Services DEBUG --- Received Blacklisted Direfrom - %s

1236 6.2.0 --- Security Services DEBUG --- Received Blacklisted Direfrom - %s

1237 5.9.0 --- Security Services DEBUG --- Not Blacklisted by domai

1237 6.0.5 --- Security Services DEBUG --- Not Blacklisted by domai

1237 6.2.0 --- Security Services DEBUG --- Not Blacklisted by domai

1238 5.9.0 --- Security Services DEBUG --- No DNS response to doma

1238 6.0.5 --- Security Services DEBUG --- No DNS response to doma

1238 6.2.0 --- Security Services DEBUG --- No DNS response to doma

1239 5.9.0 --- Security Services DEBUG --- RBL DNS server respondeerror code - %s

1239 6.0.5 --- Security Services DEBUG --- RBL DNS server respondeerror code - %s

1239 6.2.0 --- Security Services DEBUG --- RBL DNS server respondeerror code - %s

1240 5.9.0 --- --- INFO --- %s

1240 6.0.5 --- --- INFO --- %s

1240 6.2.0 --- --- INFO --- %s

1241 5.9.0 --- --- WARNING --- %s

1241 6.0.5 --- --- WARNING --- %s

1241 6.2.0 --- --- WARNING --- %s

1242 5.9.0 --- --- WARNING --- %s

1242 6.0.5 --- --- WARNING --- %s

1242 6.2.0 --- --- WARNING --- %s

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 122

or has our

or has our

or has our

rror

rror

rror

to an

to an

to an

ng is

ng is

ng is

tion is

e(for an 10

tion is

e(for an 10

tion is

e(for an 10

on for

on for

on for

1243 5.9.0 User Activity Authenticated Access

INFO --- User login Failed - An erroccurred while sending yone-time password

1243 6.0.5 User Activity Authenticated Access

INFO --- User login Failed - An erroccurred while sending yone-time password

1243 6.2.0 User Activity Authenticated Access

INFO --- User login Failed - An erroccurred while sending yone-time password

1244 5.9.0 --- RADIUS WARNING --- Failed to add an LDAP miuser group

1244 6.0.5 --- RADIUS WARNING --- Failed to add an LDAP miuser group

1244 6.2.0 --- RADIUS WARNING --- Failed to add an LDAP miuser group

1245 5.9.0 --- RADIUS WARNING --- Failed to add a member LDAP mirror user group

1245 6.0.5 --- RADIUS WARNING --- Failed to add a member LDAP mirror user group

1245 6.2.0 --- RADIUS WARNING --- Failed to add a member LDAP mirror user group

1246 5.9.0 --- RADIUS WARNING --- An LDAP user group nestinot being mirrored

1246 6.0.5 --- RADIUS WARNING --- An LDAP user group nestinot being mirrored

1246 6.2.0 --- RADIUS WARNING --- An LDAP user group nestinot being mirrored

1247 5.9.0 --- Firewall Hardware ALERT 17001 Physical interface utilizagreater than 80% of the maximum rated tolerancthe interface)for more thseconds.

1247 6.0.5 --- Firewall Hardware ALERT 17001 Physical interface utilizagreater than 80% of the maximum rated tolerancthe interface)for more thseconds.

1247 6.2.0 --- Firewall Hardware ALERT 17001 Physical interface utilizagreater than 80% of the maximum rated tolerancthe interface)for more thseconds.

1248 5.9.0 --- Firewall Hardware ALERT 17002 CPU reaches 80% utilizatimore than 10 seconds.

1248 6.0.5 --- Firewall Hardware ALERT 17002 CPU reaches 80% utilizatimore than 10 seconds.

1248 6.2.0 --- Firewall Hardware ALERT 17002 CPU reaches 80% utilizatimore than 10 seconds.

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 123

ore d

ore d

ore d

slation f the

is

e for

slation f the

is

e for

slation f the

is

e for

v2

v2

v2

ed

ed

ed

1249 5.9.0 --- Firewall Hardware ALERT 17003 Current session count is mthan 50% of the supportemaximum.

1249 6.0.5 --- Firewall Hardware ALERT 17003 Current session count is mthan 50% of the supportemaximum.

1249 6.2.0 --- Firewall Hardware ALERT 17003 Current session count is mthan 50% of the supportemaximum.

1250 5.9.0 --- Firewall Hardware ALERT 17004 Current dynamic NAT trancount is more than 50% oconfigured maximum.

1250 6.0.5 --- Firewall Hardware ALERT 17004 Total firewall throughputgreater than 50% of the maximum rated tolerancmore than 10 seconds.

1250 6.2.0 --- Firewall Hardware ALERT 17004 Current dynamic NAT trancount is more than 50% oconfigured maximum.

1251 5.9.0 --- Firewall Hardware ALERT 17005 Total firewall throughputgreater than 50% of the maximum rated tolerancmore than 10 seconds.

1251 6.0.5 --- Firewall Hardware ALERT 17005 Current dynamic NAT trancount is more than 50% oconfigured maximum.

1251 6.2.0 --- Firewall Hardware ALERT 17005 Total firewall throughputgreater than 50% of the maximum rated tolerancmore than 10 seconds.

1252 5.9.0 --- VPN IKE INFO --- IPv6 VPN only support IKEmode

1252 6.0.5 --- VPN IKE INFO --- IPv6 VPN only support IKEmode

1252 6.2.0 --- VPN IKE INFO --- IPv6 VPN only support IKEmode

1253 5.9.0 --- VPN IKE NOTICE --- IPv6 Tunnel packet dropp

1253 6.0.5 --- VPN IKE NOTICE --- IPv6 Tunnel packet dropp

1253 6.2.0 --- VPN IKE NOTICE --- IPv6 Tunnel packet dropp

1254 5.9.0 --- Network NOTICE --- ICMPv6 packet from LAN dropped

1254 6.0.5 --- Network NOTICE --- ICMPv6 packet from LAN dropped

1254 6.2.0 --- Network NOTICE --- ICMPv6 packet from LAN dropped

1255 5.9.0 --- Network INFO --- ICMPv6 packet from LAN allowed

1255 6.0.5 --- Network INFO --- ICMPv6 packet from LAN allowed

1255 6.2.0 --- Network INFO --- ICMPv6 packet from LAN allowed

1256 5.9.0 --- Network INFO --- ICMPv6 packet allowed

1256 6.0.5 --- Network INFO --- ICMPv6 packet allowed

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 124

ue to

ue to

ue to

torage

torage

torage

ases to

ases to

ases to

ced

ced

ced

eing one

eing one

eing one

quest : %s

quest : %s

1256 6.2.0 --- Network INFO --- ICMPv6 packet allowed

1257 5.9.0 --- Network NOTICE --- ICMPv6 packet dropped dpolicy

1257 6.0.5 --- Network NOTICE --- ICMPv6 packet dropped dpolicy

1257 6.2.0 --- Network NOTICE --- ICMPv6 packet dropped dpolicy

1258 5.9.0 --- --- DEBUG --- %s

1258 6.0.5 --- --- DEBUG --- %s

1258 6.2.0 --- --- DEBUG --- %s

1259 5.9.0 --- DHCP Server WARNING --- DHCPv6 lease file in the sis corrupted; read failed

1259 6.0.5 --- DHCP Server WARNING --- DHCPv6 lease file in the sis corrupted; read failed

1259 6.2.0 --- DHCP Server WARNING --- DHCPv6 lease file in the sis corrupted; read failed

1260 5.9.0 --- DHCP Server WARNING --- Failed to write DHCPv6 lestorage

1260 6.0.5 --- DHCP Server WARNING --- Failed to write DHCPv6 lestorage

1260 6.2.0 --- DHCP Server WARNING --- Failed to write DHCPv6 lestorage

1261 5.9.0 --- DHCP Server INFO --- DHCPv6 leases written tostorage

1261 6.0.5 --- DHCP Server INFO --- DHCPv6 leases written tostorage

1261 6.2.0 --- DHCP Server INFO --- DHCPv6 leases written tostorage

1262 5.9.0 --- Network Access DEBUG --- YouTube for school enfor

1262 6.0.5 --- Network Access DEBUG --- YouTube for school enfor

1262 6.2.0 --- Network Access DEBUG --- YouTube for school enfor

1263 5.9.0 Maintenance AppServerEvent INFO --- AppFlow Server Event

1263 6.0.5 --- Unused INFO --- Appflow Server Event

1263 6.2.0 --- Unused INFO --- Appflow Server Event

1264 5.9.0 --- Bandwidth Optimization

WARNING --- WLAN HTTP traffic not bsent to WXA WebCache; zconflict

1264 6.0.5 --- Bandwidth Optimization

WARNING --- WLAN HTTP traffic not bsent to WXA WebCache; zconflict

1264 6.2.0 --- Bandwidth Optimization

WARNING --- WLAN HTTP traffic not bsent to WXA WebCache; zconflict

1265 5.9.0 --- Firewall Event WARNING --- SonicPoint association reto License Manager failed

1265 6.0.5 --- Firewall Event WARNING --- SonicPoint association reto License Manager failed

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 125

quest : %s

sted anager

sted anager

sted anager

s

s

s

ccess

ccess

ccess

t

t

t

KAT

KAT

KAT

ccess

ccess

ccess

st

1265 6.2.0 --- Firewall Event WARNING --- SonicPoint association reto License Manager failed

1266 5.9.0 --- Firewall Event INFO --- SonicPoint association posuccessfully to License M

1266 6.0.5 --- Firewall Event INFO --- SonicPoint association posuccessfully to License M

1266 6.2.0 --- Firewall Event INFO --- SonicPoint association posuccessfully to License M

1267 5.9.0 User Activity VPN IKE DEBUG --- %s

1267 6.0.5 User Activity VPN IKE DEBUG --- %s

1267 6.2.0 User Activity VPN IKE DEBUG --- %s

1268 5.9.0 Firewall Settings

Firewall Event NOTICE --- Firmware Update Failed

1268 6.0.5 --- --- NOTICE --- Firmware Update Failed

1268 6.2.0 Firewall Settings

Firewall Event NOTICE --- Firmware Update Failed

1269 5.9.0 Firewall Settings

Firewall Event NOTICE --- Firmware Update Succes

1269 6.0.5 --- --- NOTICE --- Firmware Update Succes

1269 6.2.0 Firewall Settings

Firewall Event NOTICE --- Firmware Update Succes

1270 5.9.0 Maintenance --- INFO --- Crypto DH test success

1270 6.0.5 Maintenance --- INFO --- Crypto DH test success

1270 6.2.0 Maintenance --- INFO --- Crypto DH test success

1271 5.9.0 Maintenance --- INFO --- Crypto Hmac-MD5 test su

1271 6.0.5 Maintenance --- INFO --- Crypto Hmac-MD5 test su

1271 6.2.0 Maintenance --- INFO --- Crypto Hmac-MD5 test su

1272 5.9.0 Maintenance --- INFO --- Crypto hardware DES tessuccess

1272 6.0.5 Maintenance --- INFO --- Crypto hardware DES tessuccess

1272 6.2.0 Maintenance --- INFO --- Crypto hardware DES tessuccess

1273 5.9.0 Maintenance --- INFO --- Crypto MD5 test success

1273 6.0.5 Maintenance --- INFO --- Crypto MD5 test success

1273 6.2.0 Maintenance --- INFO --- Crypto MD5 test success

1274 5.9.0 --- --- INFO --- Crypto SHA1 based DRNGtest success

1274 6.0.5 --- --- INFO --- Crypto SHA1 based DRNGtest success

1274 6.2.0 --- --- INFO --- Crypto SHA1 based DRNGtest success

1275 5.9.0 Maintenance --- INFO --- Crypto Hmac-Sha1 test su

1275 6.0.5 Maintenance --- INFO --- Crypto Hmac-Sha1 test su

1275 6.2.0 Maintenance --- INFO --- Crypto Hmac-Sha1 test su

1276 5.9.0 Maintenance --- INFO --- Crypto hardware 3DES tesuccess

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 126

st

st

failed

failed

failed

ss

ss

ss

t

t

t

1276 6.0.5 Maintenance --- INFO --- Crypto hardware 3DES tesuccess

1276 6.2.0 Maintenance --- INFO --- Crypto hardware 3DES tesuccess

1277 5.9.0 Maintenance --- INFO --- Crypto DES test success

1277 6.0.5 Maintenance --- INFO --- Crypto DES test success

1277 6.2.0 Maintenance --- INFO --- Crypto DES test success

1278 5.9.0 Maintenance --- ERROR --- Crypto AES test failed

1278 6.0.5 Maintenance --- ERROR --- Crypto AES test failed

1278 6.2.0 Maintenance --- ERROR --- Crypto AES test failed

1279 5.9.0 Maintenance --- INFO --- Crypto AES test success

1279 6.0.5 Maintenance --- INFO --- Crypto AES test success

1279 6.2.0 Maintenance --- INFO --- Crypto AES test success

1280 5.9.0 Maintenance --- INFO --- Crypto DRBG test success

1280 6.0.5 Maintenance --- INFO --- Crypto DRBG test success

1280 6.2.0 Maintenance --- INFO --- Crypto DRBG test success

1281 5.9.0 Maintenance --- ERROR --- Crypto DRBG test failed

1281 6.0.5 Maintenance --- ERROR --- Crypto DRBG test failed

1281 6.2.0 Maintenance --- ERROR --- Crypto DRBG test failed

1282 5.9.0 Maintenance --- INFO --- Crypto Hmac-Sha256 testsuccess

1282 6.0.5 Maintenance --- INFO --- Crypto Hmac-Sha256 testsuccess

1282 6.2.0 Maintenance --- INFO --- Crypto Hmac-Sha256 testsuccess

1283 5.9.0 Maintenance --- ERROR --- Crypto Hmac-Sha256 test

1283 6.0.5 Maintenance --- ERROR --- Crypto Hmac-Sha256 test

1283 6.2.0 Maintenance --- ERROR --- Crypto Hmac-Sha256 test

1284 5.9.0 Maintenance --- INFO --- Crypto RSA test success

1284 6.0.5 Maintenance --- INFO --- Crypto RSA test success

1284 6.2.0 Maintenance --- INFO --- Crypto RSA test success

1285 5.9.0 Maintenance --- INFO --- Crypto Sha1 test success

1285 6.0.5 Maintenance --- INFO --- Crypto Sha1 test success

1285 6.2.0 Maintenance --- INFO --- Crypto Sha1 test success

1286 5.9.0 Maintenance --- INFO --- Crypto Sha256 test succe

1286 6.0.5 Maintenance --- INFO --- Crypto Sha256 test succe

1286 6.2.0 Maintenance --- INFO --- Crypto Sha256 test succe

1287 5.9.0 Maintenance --- ERROR --- Crypto Sha256 test failed

1287 6.0.5 Maintenance --- ERROR --- Crypto Sha256 test failed

1287 6.2.0 Maintenance --- ERROR --- Crypto Sha256 test failed

1288 5.9.0 Maintenance --- INFO --- Crypto hardware AES tessuccess

1288 6.0.5 Maintenance --- INFO --- Crypto hardware AES tessuccess

1288 6.2.0 Maintenance --- INFO --- Crypto hardware AES tessuccess

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 127

h SHA

h SHA

h SHA

th SHA

th SHA

th SHA

fully

fully

fully

6 C 4291.

6 C 4291.

6 C 4291.

is pped

is pped

is pped

et is is

et is is

1289 5.9.0 Maintenance --- INFO --- Crypto hardware DES wittest success

1289 6.0.5 Maintenance --- INFO --- Crypto hardware DES wittest success

1289 6.2.0 Maintenance --- INFO --- Crypto hardware DES wittest success

1290 5.9.0 Maintenance --- INFO --- Crypto hardware 3DES witest success

1290 6.0.5 Maintenance --- INFO --- Crypto hardware 3DES witest success

1290 6.2.0 Maintenance --- INFO --- Crypto hardware 3DES witest success

1299 5.9.0 Maintenance --- ALERT --- Ndpp SelfTest write/readencrypt/decrypt successs

1299 6.0.5 Maintenance --- ALERT --- Ndpp SelfTest write/readencrypt/decrypt successs

1299 6.2.0 Maintenance --- ALERT --- Ndpp SelfTest write/readencrypt/decrypt successs

1300 5.9.0 Maintenance --- ALERT --- Ndpp SelfTest write/readencrypt/decrypt failure

1300 6.0.5 Maintenance --- ALERT --- Ndpp SelfTest write/readencrypt/decrypt failure

1300 6.2.0 Maintenance --- ALERT --- Ndpp SelfTest write/readencrypt/decrypt failure

1301 5.9.0 Debug Network Access ALERT --- Source or Destination IPvaddress is reserved by RFPacket is dropped

1301 6.0.5 Debug Network Access ALERT --- Source or Destination IPvaddress is reserved by RFPacket is dropped

1301 6.2.0 Debug Network Access ALERT --- Source or Destination IPvaddress is reserved by RFPacket is dropped

1302 5.9.0 Debug Network Access ALERT --- Destination IPv6 address unspecified. Packet is dro

1302 6.0.5 Debug Network Access ALERT --- Destination IPv6 address unspecified. Packet is dro

1302 6.2.0 Debug Network Access ALERT --- Destination IPv6 address unspecified. Packet is dro

1303 5.9.0 Debug Network Access ALERT --- Source IPv6 address is unspecified but this packnot Neighbor Solicitationmessage for DAD. Packetdropped

1303 6.0.5 Debug Network Access ALERT --- Source IPv6 address is unspecified but this packnot Neighbor Solicitationmessage for DAD. Packetdropped

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 128

et is is

NDPP

NDPP

NDPP

y for

y for

y for

y for d

y for d

y for d

for IKE

for IKE

for IKE

for d

for d

for d

s

s

s

anager

anager

anager

1303 6.2.0 Debug Network Access ALERT --- Source IPv6 address is unspecified but this packnot Neighbor Solicitationmessage for DAD. Packetdropped

1304 5.9.0 Debug Network Access ALERT --- Packet is dropped due torules.

1304 6.0.5 Debug Network Access ALERT --- Packet is dropped due torules.

1304 6.2.0 Debug Network Access ALERT --- Packet is dropped due torules.

1305 5.9.0 User Activity VPN IKE WARNING --- IKE Responder : VPN PolicIKE ID not found

1305 6.0.5 User Activity VPN IKE WARNING --- IKE Responder : VPN PolicIKE ID not found

1305 6.2.0 User Activity VPN IKE WARNING --- IKE Responder : VPN PolicIKE ID not found

1306 5.9.0 User Activity VPN IKE WARNING --- IKE Responder : VPN Policgateway address not foun

1306 6.0.5 User Activity VPN IKE WARNING --- IKE Responder : VPN Policgateway address not foun

1306 6.2.0 User Activity VPN IKE WARNING --- IKE Responder : VPN Policgateway address not foun

1307 5.9.0 User Activity VPN IKE WARNING --- IKE Initiator : VPN Policy ID not found

1307 6.0.5 User Activity VPN IKE WARNING --- IKE Initiator : VPN Policy ID not found

1307 6.2.0 User Activity VPN IKE WARNING --- IKE Initiator : VPN Policy ID not found

1308 5.9.0 User Activity VPN IKE WARNING --- IKE Initiator : VPN Policy gateway address not foun

1308 6.0.5 User Activity VPN IKE WARNING --- IKE Initiator : VPN Policy gateway address not foun

1308 6.2.0 User Activity VPN IKE WARNING --- IKE Initiator : VPN Policy gateway address not foun

1309 5.9.0 --- Firewall Event WARNING --- HA association request toLicense Manager failed: %

1309 6.0.5 --- Firewall Event WARNING --- HA association request toLicense Manager failed: %

1309 6.2.0 --- Firewall Event WARNING --- HA association request toLicense Manager failed: %

1310 5.9.0 --- Firewall Event INFO --- HA association posted successfully to License M

1310 6.0.5 --- Firewall Event INFO --- HA association posted successfully to License M

1310 6.2.0 --- Firewall Event INFO --- HA association posted successfully to License M

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 129

f this %s

f this %s

f this %s

Traffic with

Traffic with

Traffic with

MAC

MAC

MAC

1311 5.9.0 --- DHCP Server ALERT --- DHCP Server: Resources opool ran out. Client Info:

1311 6.0.5 --- DHCP Server ALERT --- DHCP Server: Resources opool ran out. Client Info:

1311 6.2.0 --- DHCP Server ALERT --- DHCP Server: Resources opool ran out. Client Info:

1312 5.9.0 --- VPN IKE INFO --- IKEv2: Peer's IP Version ofSelector does not match ours

1312 6.0.5 --- VPN IKE INFO --- IKEv2: Peer's IP Version ofSelector does not match ours

1312 6.2.0 --- VPN IKE INFO --- IKEv2: Peer's IP Version ofSelector does not match ours

1313 5.9.0 --- --- INFO --- NAT policy added

1313 6.0.5 --- --- INFO --- NAT policy added

1313 6.2.0 --- --- INFO --- NAT policy added

1314 5.9.0 --- --- INFO --- NAT policy modified

1314 6.0.5 --- --- INFO --- NAT policy modified

1314 6.2.0 --- --- INFO --- NAT policy modified

1315 5.9.0 --- --- INFO --- NAT policy deleted

1315 6.0.5 --- --- INFO --- NAT policy deleted

1315 6.2.0 --- --- INFO --- NAT policy deleted

1316 5.9.0 --- Network ALERT --- Possible ARP attack fromaddress %s

1316 6.0.5 --- Network ALERT --- Possible ARP attack fromaddress %s

1316 6.2.0 --- Network ALERT --- Possible ARP attack fromaddress %s

1317 5.9.0 --- Firewall Hardware ALERT 5426 %s

1317 6.0.5 --- Firewall Hardware ALERT 5426 %s

1317 6.2.0 --- Firewall Hardware ALERT 5426 %s

1318 5.9.0 --- Firewall Hardware ALERT 5427 %s

1318 6.0.5 --- Firewall Hardware ALERT 5427 %s

1318 6.2.0 --- Firewall Hardware ALERT 5427 %s

1319 5.9.0 --- Firewall Hardware ALERT 5428 %s

1319 6.0.5 --- Firewall Hardware ALERT 5428 %s

1319 6.2.0 --- Firewall Hardware ALERT 5428 %s

1320 5.9.0 --- Firewall Hardware ALERT 5429 %s

1320 6.0.5 --- Firewall Hardware ALERT 5429 %s

1320 6.2.0 --- Firewall Hardware ALERT 5429 %s

1321 5.9.0 --- Firewall Hardware ALERT 5430 %s

1321 6.0.5 --- Firewall Hardware ALERT 5430 %s

1321 6.2.0 --- Firewall Hardware ALERT 5430 %s

1322 5.9.0 --- Firewall Hardware ALERT 5431 %s

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 130

r

r

r

r

r

r

tection

tection

tection

tection

tection

tection

quest

quest

quest

I

I

I

sponse

sponse

sponse

I

I

I

%s

%s

1322 6.0.5 --- Firewall Hardware ALERT 5431 %s

1322 6.2.0 --- Firewall Hardware ALERT 5431 %s

1323 5.9.0 --- Firewall Hardware ALERT 5432 %s

1323 6.0.5 --- Firewall Hardware ALERT 5432 %s

1323 6.2.0 --- Firewall Hardware ALERT 5432 %s

1324 5.9.0 User Activity VPN IKE INFO --- IKEv2 Received Dead PeeDetection Request

1324 6.0.5 User Activity VPN IKE INFO --- IKEv2 Received Dead PeeDetection Request

1324 6.2.0 User Activity VPN IKE INFO --- IKEv2 Received Dead PeeDetection Request

1325 5.9.0 User Activity VPN IKE INFO --- IKEv2 Received Dead PeeDetection Response

1325 6.0.5 User Activity VPN IKE INFO --- IKEv2 Received Dead PeeDetection Response

1325 6.2.0 User Activity VPN IKE INFO --- IKEv2 Received Dead PeeDetection Response

1326 5.9.0 User Activity VPN IKE INFO --- IKEv2 Send Dead Peer DeRequest

1326 6.0.5 User Activity VPN IKE INFO --- IKEv2 Send Dead Peer DeRequest

1326 6.2.0 User Activity VPN IKE INFO --- IKEv2 Send Dead Peer DeRequest

1327 5.9.0 User Activity VPN IKE INFO --- IKEv2 Send Dead Peer DeResponse

1327 6.0.5 User Activity VPN IKE INFO --- IKEv2 Send Dead Peer DeResponse

1327 6.2.0 User Activity VPN IKE INFO --- IKEv2 Send Dead Peer DeResponse

1328 5.9.0 User Activity VPN IKE INFO --- IKEv2 Send Invalid SPI Re

1328 6.0.5 User Activity VPN IKE INFO --- IKEv2 Send Invalid SPI Re

1328 6.2.0 User Activity VPN IKE INFO --- IKEv2 Send Invalid SPI Re

1329 5.9.0 User Activity VPN IKE INFO --- IKEv2 Received Invalid SPRequest

1329 6.0.5 User Activity VPN IKE INFO --- IKEv2 Received Invalid SPRequest

1329 6.2.0 User Activity VPN IKE INFO --- IKEv2 Received Invalid SPRequest

1330 5.9.0 User Activity VPN IKE INFO --- IKEv2 Send Invalid SPI Re

1330 6.0.5 User Activity VPN IKE INFO --- IKEv2 Send Invalid SPI Re

1330 6.2.0 User Activity VPN IKE INFO --- IKEv2 Send Invalid SPI Re

1331 5.9.0 User Activity VPN IKE INFO --- IKEv2 Received Invalid SPResponse

1331 6.0.5 User Activity VPN IKE INFO --- IKEv2 Received Invalid SPResponse

1331 6.2.0 User Activity VPN IKE INFO --- IKEv2 Received Invalid SPResponse

1332 5.9.0 Maintenance Firewall Event ALERT --- NDPP mode is changed to

1332 6.0.5 Maintenance Firewall Event ALERT --- NDPP mode is changed to

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 131

%s

ged

ged

ged

ed

ed

ed

1332 6.2.0 Maintenance Firewall Event ALERT --- NDPP mode is changed to

1333 5.9.0 User Activity Authenticated Access

INFO --- %s

1333 6.0.5 User Activity Authenticated Access

INFO --- %s

1333 6.2.0 User Activity Authenticated Access

INFO --- %s

1334 5.9.0 User Activity Authenticated Access

INFO --- %s

1334 6.0.5 User Activity Authenticated Access

INFO --- %s

1334 6.2.0 User Activity Authenticated Access

INFO --- %s

1335 5.9.0 User Activity Authenticated Access

INFO --- %s

1335 6.0.5 User Activity Authenticated Access

INFO --- %s

1335 6.2.0 User Activity Authenticated Access

INFO --- %s

1336 5.9.0 Firewall Settings

Firewall Event INFO --- Certification %s

1336 6.0.5 Firewall Settings

Firewall Event INFO --- Certification %s

1336 6.2.0 Firewall Settings

Firewall Event INFO --- Certification %s

1337 5.9.0 Firewall Settings

Firewall Event INFO --- %s

1337 6.0.5 Firewall Settings

Firewall Event INFO --- %s

1337 6.2.0 Firewall Settings

Firewall Event INFO --- %s

1338 5.9.0 Firewall Settings

Firewall Event INFO --- User %s password is chan

1338 6.0.5 Firewall Settings

Firewall Event INFO --- User %s password is chan

1338 6.2.0 Firewall Settings

Firewall Event INFO --- User %s password is chan

1339 5.9.0 Firewall Settings

Firewall Event INFO --- Password rule %s is chang

1339 6.0.5 Firewall Settings

Firewall Event INFO --- Password rule %s is chang

1339 6.2.0 Firewall Settings

Firewall Event INFO --- Password rule %s is chang

1340 5.9.0 Firewall Settings

Firewall Event INFO --- User Inactive timeout is changed to %s

1340 6.0.5 Firewall Settings

Firewall Event INFO --- User Inactive timeout is changed to %s

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 132

er

er

er

ss

ss

ss

ss

ss

ss

1340 6.2.0 Firewall Settings

Firewall Event INFO --- User Inactive timeout is changed to %s

1341 5.9.0 User Activity Authenticated Access

INFO --- %s

1341 6.0.5 User Activity Authenticated Access

INFO --- %s

1341 6.2.0 User Activity Authenticated Access

INFO --- %s

1342 5.9.0 User Activity Authenticated Access

INFO --- Update administrator/uslockout params - %s

1342 6.0.5 User Activity Authenticated Access

INFO --- Update administrator/uslockout params - %s

1342 6.2.0 User Activity Authenticated Access

INFO --- Update administrator/uslockout params - %s

1343 5.9.0 User Activity VPN INFO --- VPN Policy %s

1343 6.0.5 User Activity VPN INFO --- VPN Policy %s

1343 6.2.0 User Activity VPN INFO --- VPN Policy %s

1344 5.9.0 System Error Firewall Event INFO --- %s

1344 6.0.5 System Error Firewall Event INFO --- %s

1344 6.2.0 System Error Firewall Event INFO --- %s

1345 5.9.0 --- Crypto Test INFO --- Crypto Sha384 test succe

1345 6.0.5 --- Crypto Test INFO --- Crypto Sha384 test succe

1345 6.2.0 --- Crypto Test INFO --- Crypto Sha384 test succe

1346 5.9.0 --- Crypto Test ERROR --- Crypto Sha384 test failed

1346 6.0.5 --- Crypto Test ERROR --- Crypto Sha384 test failed

1346 6.2.0 --- Crypto Test ERROR --- Crypto Sha384 test failed

1347 5.9.0 --- Crypto Test INFO --- Crypto Sha512 test succe

1347 6.0.5 --- Crypto Test INFO --- Crypto Sha512 test succe

1347 6.2.0 --- Crypto Test INFO --- Crypto Sha512 test succe

1348 5.9.0 --- Crypto Test ERROR --- Crypto Sha512 test failed

1348 6.0.5 --- Crypto Test ERROR --- Crypto Sha512 test failed

1348 6.2.0 --- Crypto Test ERROR --- Crypto Sha512 test failed

1349 5.9.0 --- Crypto Test INFO --- Crypto Ikev1 test success

1349 6.0.5 --- Crypto Test INFO --- Crypto Ikev1 test success

1349 6.2.0 --- Crypto Test INFO --- Crypto Ikev1 test success

1350 5.9.0 --- Crypto Test ERROR --- Crypto Ikev1 test failed

1350 6.0.5 --- Crypto Test ERROR --- Crypto Ikev1 test failed

1350 6.2.0 --- Crypto Test ERROR --- Crypto Ikev1 test failed

1351 5.9.0 --- Crypto Test INFO --- Crypto Ikev2 test success

1351 6.0.5 --- Crypto Test INFO --- Crypto Ikev2 test success

1351 6.2.0 --- Crypto Test INFO --- Crypto Ikev2 test success

1352 5.9.0 --- Crypto Test ERROR --- Crypto Ikev2 test failed

1352 6.0.5 --- Crypto Test ERROR --- Crypto Ikev2 test failed

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 133

uccess

uccess

uccess

ailed

ailed

ailed

failed

failed

failed

failed

failed

failed

ailed

ailed

1352 6.2.0 --- Crypto Test ERROR --- Crypto Ikev2 test failed

1353 5.9.0 --- Crypto Test INFO --- Crypto SSH test success

1353 6.0.5 --- Crypto Test INFO --- Crypto SSH test success

1353 6.2.0 --- Crypto Test INFO --- Crypto SSH test success

1354 5.9.0 --- Crypto Test ERROR --- Crypto SSH test failed

1354 6.0.5 --- Crypto Test ERROR --- Crypto SSH test failed

1354 6.2.0 --- Crypto Test ERROR --- Crypto SSH test failed

1355 5.9.0 --- Crypto Test INFO --- Crypto SNMP test success

1355 6.0.5 --- Crypto Test INFO --- Crypto SNMP test success

1355 6.2.0 --- Crypto Test INFO --- Crypto SNMP test success

1356 5.9.0 --- Crypto Test ERROR --- Crypto SNMP test failed

1356 6.0.5 --- Crypto Test ERROR --- Crypto SNMP test failed

1356 6.2.0 --- Crypto Test ERROR --- Crypto SNMP test failed

1357 5.9.0 --- Crypto Test INFO --- Crypto TLS 1.0/1.1 test s

1357 6.0.5 --- Crypto Test INFO --- Crypto TLS 1.0/1.1 test s

1357 6.2.0 --- Crypto Test INFO --- Crypto TLS 1.0/1.1 test s

1358 5.9.0 --- Crypto Test ERROR --- Crypto TLS 1.0/1.1 test f

1358 6.0.5 --- Crypto Test ERROR --- Crypto TLS 1.0/1.1 test f

1358 6.2.0 --- Crypto Test ERROR --- Crypto TLS 1.0/1.1 test f

1359 5.9.0 --- Crypto Test INFO --- Crypto Hmac-Sha384 testsuccess

1359 6.0.5 --- Crypto Test INFO --- Crypto Hmac-Sha384 testsuccess

1359 6.2.0 --- Crypto Test INFO --- Crypto Hmac-Sha384 testsuccess

1360 5.9.0 --- Crypto Test ERROR --- Crypto Hmac-Sha384 test

1360 6.0.5 --- Crypto Test ERROR --- Crypto Hmac-Sha384 test

1360 6.2.0 --- Crypto Test ERROR --- Crypto Hmac-Sha384 test

1361 5.9.0 --- Crypto Test INFO --- Crypto Hmac-Sha512 testsuccess

1361 6.0.5 --- Crypto Test INFO --- Crypto Hmac-Sha512 testsuccess

1361 6.2.0 --- Crypto Test INFO --- Crypto Hmac-Sha512 testsuccess

1362 5.9.0 --- Crypto Test ERROR --- Crypto Hmac-Sha512 test

1362 6.0.5 --- Crypto Test ERROR --- Crypto Hmac-Sha512 test

1362 6.2.0 --- Crypto Test ERROR --- Crypto Hmac-Sha512 test

1363 5.9.0 802.11b Management

Wireless ALERT --- Wireless Flood Attack

1363 6.0.5 802.11b Management

Wireless ALERT --- Wireless Flood Attacking

1363 6.2.0 802.11b Management

Wireless ALERT --- Wireless Flood Attack

1364 5.9.0 --- VPN PKI ALERT --- Cert Payload processing f

1364 6.0.5 --- VPN PKI ALERT --- Cert Payload processing f

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 134

ailed

%s

%s

%s

TCP

TCP

TCP

%s

%s

%s

%s has

%s has

%s has

%s

%s

%s

too

too

1364 6.2.0 --- VPN PKI ALERT --- Cert Payload processing f

1365 5.9.0 --- DPI-SSL NOTICE --- DPI-SSL: %s

1365 6.0.5 --- DPI-SSL NOTICE --- DPI-SSL: %s

1365 6.2.0 --- DPI-SSL NOTICE --- DPI-SSL: %s

1366 5.9.0 Attack Intrusion Detection

ALERT --- TCP-Flooding machine %sblacklisted

1366 6.0.5 Attack Intrusion Detection

ALERT --- TCP-Flooding machine %sblacklisted

1366 6.2.0 Attack Intrusion Detection

ALERT --- TCP-Flooding machine %sblacklisted

1367 5.9.0 Attack Intrusion Detection

WARNING --- TCP Flood Blacklist on IFcontinues

1367 6.0.5 Attack Intrusion Detection

WARNING --- TCP Flood Blacklist on IFcontinues

1367 6.2.0 Attack Intrusion Detection

WARNING --- TCP Flood Blacklist on IFcontinues

1368 5.9.0 Attack Intrusion Detection

ALERT --- Machine %s removed fromflood blacklist

1368 6.0.5 Attack Intrusion Detection

ALERT --- Machine %s removed fromflood blacklist

1368 6.2.0 Attack Intrusion Detection

ALERT --- Machine %s removed fromflood blacklist

1369 5.9.0 Attack Intrusion Detection

ALERT --- Possible TCP Flood on IF

1369 6.0.5 Attack Intrusion Detection

ALERT --- Possible TCP Flood on IF

1369 6.2.0 Attack Intrusion Detection

ALERT --- Possible TCP Flood on IF

1370 5.9.0 Attack Intrusion Detection

ALERT --- Possible TCP Flood on IF ceased

1370 6.0.5 Attack Intrusion Detection

ALERT --- Possible TCP Flood on IF ceased

1370 6.2.0 Attack Intrusion Detection

ALERT --- Possible TCP Flood on IF ceased

1371 5.9.0 Attack Intrusion Detection

WARNING --- Possible TCP Flood on IF continues

1371 6.0.5 Attack Intrusion Detection

WARNING --- Possible TCP Flood on IF continues

1371 6.2.0 Attack Intrusion Detection

WARNING --- Possible TCP Flood on IF continues

1372 5.9.0 --- RADIUS WARNING --- LDAP mirroring overflow:many user groups

1372 6.0.5 --- RADIUS WARNING --- LDAP mirroring overflow:many user groups

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 135

too

nvalid

nvalid

nvalid

xceeds ze

xceeds ze

xceeds ze

ith

ith

ith

th this

th this

th this

to s

to s

to s

1372 6.2.0 --- RADIUS WARNING --- LDAP mirroring overflow:many user groups

1373 5.9.0 Attack Intrusion Detection

ALERT --- IPv6 fragment dropped, ilength (<1280 Bytes)

1373 6.0.5 Attack Intrusion Detection

ALERT --- IPv6 fragment dropped, ilength (<1280 Bytes)

1373 6.2.0 Attack Intrusion Detection

ALERT --- IPv6 fragment dropped, ilength (<1280 Bytes)

1374 5.9.0 Attack Intrusion Detection

ALERT --- IGMP packet dropped, incomplete fragments

1374 6.0.5 Attack Intrusion Detection

ALERT --- IGMP packet dropped, incomplete fragments

1374 6.2.0 Attack Intrusion Detection

ALERT --- IGMP packet dropped, incomplete fragments

1375 5.9.0 Attack Intrusion Detection

ALERT --- UDP fragment dropped, emaximum IP datagram si(>65535)

1375 6.0.5 Attack Intrusion Detection

ALERT --- UDP fragment dropped, emaximum IP datagram si(>65535)

1375 6.2.0 Attack Intrusion Detection

ALERT --- UDP fragment dropped, emaximum IP datagram si(>65535)

1376 5.9.0 Attack Intrusion Detection

ALERT --- Nestea/Teardrop attack dropped

1376 6.0.5 Attack Intrusion Detection

ALERT --- Nestea/Teardrop attack dropped

1376 6.2.0 Attack Intrusion Detection

ALERT --- Nestea/Teardrop attack dropped

1377 5.9.0 --- Anti-Spam ALERT --- SHLO verification failed wthis client IP - %s

1377 6.0.5 --- Anti-Spam ALERT --- SHLO verification failed wthis client IP - %s

1377 6.2.0 --- Anti-Spam ALERT --- SHLO verification failed wthis client IP - %s

1378 5.9.0 --- Anti-Spam ALERT --- Possible replay attack wiclient IP - %s

1378 6.0.5 --- Anti-Spam ALERT --- Possible replay attack wiclient IP - %s

1378 6.2.0 --- Anti-Spam ALERT --- Possible replay attack wiclient IP - %s

1379 5.9.0 --- Bandwidth Optimization

WARNING --- WXA association request License Manager failed: %

1379 6.0.5 --- Unused WARNING --- WXA association request License Manager failed: %

1379 6.2.0 --- Bandwidth Optimization

WARNING --- WXA association request License Manager failed: %

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 136

anager

anager

anager

rt:

.

rt:

.

rt:

.

: %s

: %s

: %s

n ed

n ed

n ed

er; TCP

er; TCP

er; TCP

led

led

led

1380 5.9.0 --- Bandwidth Optimization

INFO --- WXA association posted successfully to License M

1380 6.0.5 --- Unused INFO --- WXA association posted successfully to License M

1380 6.2.0 --- Bandwidth Optimization

INFO --- WXA association posted successfully to License M

1381 5.9.0 --- Security Services WARNING 15003 Received App-Control AleYour Application Control subscRIPtion has expired

1381 6.0.5 --- Security Services WARNING 15003 Received App-Control AleYour Application Control subscRIPtion has expired

1381 6.2.0 --- Security Services WARNING 15003 Received App-Control AleYour Application Control subscRIPtion has expired

1382 5.9.0 User Activity Unused INFO 5609 Configuration succeeded

1382 6.0.5 User Activity Unused INFO 5609 Configuration succeeded

1382 6.2.0 User Activity Firewall Logging INFO 5609 Configuration succeeded

1383 5.9.0 User Activity Unused INFO 5610 Configuration failed: %s

1383 6.0.5 User Activity Unused INFO 5610 Configuration failed: %s

1383 6.2.0 User Activity Firewall Logging INFO 5610 Configuration failed: %s

1384 5.9.0 Debug Network DEBUG --- TCP packet received withinvalid Timestamps optiolength; TCP packet dropp

1384 6.0.5 Debug Unused DEBUG --- TCP packet received withinvalid Timestamps optiolength; TCP packet dropp

1384 6.2.0 Debug Network DEBUG --- TCP packet received withinvalid Timestamps optiolength; TCP packet dropp

1385 5.9.0 Debug Network DEBUG --- TCP packet received withwrapped sequence numbpacket dropped

1385 6.0.5 Debug Unused DEBUG --- TCP packet received withwrapped sequence numbpacket dropped

1385 6.2.0 Debug Network DEBUG --- TCP packet received withwrapped sequence numbpacket dropped

1387 5.9.0 Attack Intrusion Detection

ALERT --- TCP Null Flag dropped

1387 6.0.5 Attack Intrusion Detection

ALERT --- TCP Null Flag dropped

1387 6.2.0 Attack Intrusion Detection

ALERT --- TCP Null Flag dropped

1388 5.9.0 Attack VPN IPsec ALERT --- IPSec VPN Decryption Fai

1388 6.0.5 Attack VPN IPsec ALERT --- IPSec VPN Decryption Fai

1388 6.2.0 Attack VPN IPsec ALERT --- IPSec VPN Decryption Fai

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 137

t

t

t

te on

te on

te on

%s

1389 5.9.0 Maintenance Security Services INFO --- Access attempt from hoswithout Client CF agent installed

1389 6.0.5 Maintenance Unused INFO --- Access attempt from hoswithout Client CF agent installed

1389 6.2.0 Maintenance Security Services INFO --- Access attempt from hoswithout Client CF agent installed

1390 5.9.0 Maintenance Security Services INFO --- Client CF agent out-of-dahost

1390 6.0.5 Maintenance Unused INFO --- Client CF agent out-of-dahost

1390 6.2.0 Maintenance Security Services INFO --- Client CF agent out-of-dahost

1391 5.9.0 Attack Unused ALERT --- Packet Data

1391 6.0.5 Attack Unused ALERT --- Packet Data

1391 6.2.0 Attack Security Services ALERT --- Packet Data

1392 5.9.0 Maintenance Unused ALERT 5243 Blade up:%s

1392 6.0.5 Maintenance Firewall Event ALERT 5243 Blade up:%s

1392 6.2.0 Maintenance Unused ALERT 5243 Blade up:%s

1393 5.9.0 Maintenance Unused ALERT 5244 Blade down:%s

1393 6.0.5 Maintenance Firewall Event ALERT 5244 Blade down:%s

1393 6.2.0 Maintenance Unused ALERT 5244 Blade down:%s

1394 5.9.0 --- Bandwidth Optimization

ERROR --- WXA Startup Failure - %s

1394 6.0.5 --- Unused ERROR --- WXA Startup Failure - %s

1394 6.2.0 --- Bandwidth Optimization

ERROR --- WXA Startup Failure - %s

1395 5.9.0 --- Bandwidth Optimization

WARNING --- WXA Get Failure - %s

1395 6.0.5 --- Unused WARNING --- WXA Get Failure - %s

1395 6.2.0 --- Bandwidth Optimization

WARNING --- WXA Get Failure - %s

1396 5.9.0 --- Bandwidth Optimization

NOTICE --- WXA Parse Failure - %s

1396 6.0.5 --- Unused NOTICE --- WXA Parse Failure - %s

1396 6.2.0 --- Bandwidth Optimization

NOTICE --- WXA Parse Failure - %s

1397 5.9.0 --- Bandwidth Optimization

NOTICE --- WXA Register Failure - %s

1397 6.0.5 --- Unused NOTICE --- WXA Register Failure - %s

1397 6.2.0 --- Bandwidth Optimization

NOTICE --- WXA Register Failure - %s

1398 5.9.0 --- Bandwidth Optimization

NOTICE --- WXA Unregister Failure -

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 138

%s

%s

1398 6.0.5 --- Unused NOTICE --- WXA Unregister Failure -

1398 6.2.0 --- Bandwidth Optimization

NOTICE --- WXA Unregister Failure -

1399 5.9.0 --- Bandwidth Optimization

NOTICE --- WXA Probe Failure - %s

1399 6.0.5 --- Unused NOTICE --- WXA Probe Failure - %s

1399 6.2.0 --- Bandwidth Optimization

NOTICE --- WXA Probe Failure - %s

1400 5.9.0 --- Bandwidth Optimization

ALERT --- WXA Create Failure - %s

1400 6.0.5 --- Unused ALERT --- WXA Create Failure - %s

1400 6.2.0 --- Bandwidth Optimization

ALERT --- WXA Create Failure - %s

1401 5.9.0 --- Bandwidth Optimization

WARNING --- WXA Set Failure - %s

1401 6.0.5 --- Unused WARNING --- WXA Set Failure - %s

1401 6.2.0 --- Bandwidth Optimization

WARNING --- WXA Set Failure - %s

1402 5.9.0 --- Bandwidth Optimization

ERROR --- WXA Delete Failure - %s

1402 6.0.5 --- Unused ERROR --- WXA Delete Failure - %s

1402 6.2.0 --- Bandwidth Optimization

ERROR --- WXA Delete Failure - %s

1403 5.9.0 --- Bandwidth Optimization

INFO --- WXA Enable - %s

1403 6.0.5 --- Unused INFO --- WXA Enable - %s

1403 6.2.0 --- Bandwidth Optimization

INFO --- WXA Enable - %s

1404 5.9.0 --- Bandwidth Optimization

INFO --- WXA Disable - %s

1404 6.0.5 --- Unused INFO --- WXA Disable - %s

1404 6.2.0 --- Bandwidth Optimization

INFO --- WXA Disable - %s

1405 5.9.0 --- Bandwidth Optimization

WARNING --- WXA Request Failure - %s

1405 6.0.5 --- Unused WARNING --- WXA Request Failure - %s

1405 6.2.0 --- Bandwidth Optimization

WARNING --- WXA Request Failure - %s

1406 5.9.0 --- Unused INFO --- General DHCPv6 Client Information [%s]

1406 6.0.5 --- Unused INFO --- General DHCPv6 Client Information [%s]

1406 6.2.0 --- DHCP Client INFO --- General DHCPv6 Client Information [%s]

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 139

age

age

age

essage

essage

essage

ply

ply

ply

gs [%s]

gs [%s]

gs [%s]

lease

lease

lease

ease

ease

ease

ease %s

ease %s

ease %s

ease %s

ease %s

ease %s

HCPv6

1407 5.9.0 --- Unused DEBUG --- DHCPv6 Client sent mess[%s]

1407 6.0.5 --- Unused DEBUG --- DHCPv6 Client sent mess[%s]

1407 6.2.0 --- DHCP Client DEBUG --- DHCPv6 Client sent mess[%s]

1408 5.9.0 --- Unused DEBUG --- DHCPv6 Client received m[%s]

1408 6.0.5 --- Unused DEBUG --- DHCPv6 Client received m[%s]

1408 6.2.0 --- DHCP Client DEBUG --- DHCPv6 Client received m[%s]

1409 5.9.0 --- Unused DEBUG --- DHCPv6 Client Duplicate Address Detection [%s]

1409 6.0.5 --- Unused DEBUG --- DHCPv6 Client Duplicate Address Detection [%s]

1409 6.2.0 --- DHCP Client DEBUG --- DHCPv6 Client Duplicate Address Detection [%s]

1410 5.9.0 --- Unused DEBUG --- DHCPv6 Client waiting retimeout [%s]

1410 6.0.5 --- Unused DEBUG --- DHCPv6 Client waiting retimeout [%s]

1410 6.2.0 --- DHCP Client DEBUG --- DHCPv6 Client waiting retimeout [%s]

1411 5.9.0 --- Unused DEBUG --- Router Advertisement fla

1411 6.0.5 --- Unused DEBUG --- Router Advertisement fla

1411 6.2.0 --- DHCP Client DEBUG --- Router Advertisement fla

1412 5.9.0 --- Unused INFO --- DHCPv6 Client got a new[%s]

1412 6.0.5 --- Unused INFO --- DHCPv6 Client got a new[%s]

1412 6.2.0 --- DHCP Client INFO --- DHCPv6 Client got a new[%s]

1413 5.9.0 --- Unused INFO --- DHCPv6 Client released l[%s]

1413 6.0.5 --- Unused INFO --- DHCPv6 Client released l[%s]

1413 6.2.0 --- DHCP Client INFO --- DHCPv6 Client released l[%s]

1414 5.9.0 --- Unused INFO --- DHCPv6 Server assigned l

1414 6.0.5 --- Unused INFO --- DHCPv6 Server assigned l

1414 6.2.0 --- DHCP Server INFO --- DHCPv6 Server assigned l

1415 5.9.0 --- Unused INFO --- DHCPv6 Server released l

1415 6.0.5 --- Unused INFO --- DHCPv6 Server released l

1415 6.2.0 --- DHCP Server INFO --- DHCPv6 Server released l

1416 5.9.0 --- Unused INFO --- DHCPv6 Server received DDecline from client %s

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 140

HCPv6

HCPv6

s of Info: %s

s of Info: %s

s of Info: %s

w

w

w

ope

ope

ope

age

age

age

ected

ected

ected

1416 6.0.5 --- Unused INFO --- DHCPv6 Server received DDecline from client %s

1416 6.2.0 --- DHCP Server INFO --- DHCPv6 Server received DDecline from client %s

1417 5.9.0 --- Unused WARNING --- DHCPv6 Server: Resourcethis pool ran out. Client

1417 6.0.5 --- Unused WARNING --- DHCPv6 Server: Resourcethis pool ran out. Client

1417 6.2.0 --- DHCP Server WARNING --- DHCPv6 Server: Resourcethis pool ran out. Client

1418 5.9.0 --- Unused INFO --- DHCPv6 Server: Add a nescope (%s)

1418 6.0.5 --- Unused INFO --- DHCPv6 Server: Add a nescope (%s)

1418 6.2.0 --- DHCP Server INFO --- DHCPv6 Server: Add a nescope (%s)

1419 5.9.0 --- Unused INFO --- DHCPv6 Server: Delete sc(%s)

1419 6.0.5 --- Unused INFO --- DHCPv6 Server: Delete sc(%s)

1419 6.2.0 --- DHCP Server INFO --- DHCPv6 Server: Delete sc(%s)

1420 5.9.0 --- Unused DEBUG --- DHCPv6 Server received message (%s)

1420 6.0.5 --- Unused DEBUG --- DHCPv6 Server received message (%s)

1420 6.2.0 --- DHCP Server DEBUG --- DHCPv6 Server received message (%s)

1421 5.9.0 --- Unused DEBUG --- DHCPv6 Server sent mess(%s)

1421 6.0.5 --- Unused DEBUG --- DHCPv6 Server sent mess(%s)

1421 6.2.0 --- DHCP Server DEBUG --- DHCPv6 Server sent mess(%s)

1422 5.9.0 --- Unused WARNING --- IPv6 address conflict detfrom Ethernet address %s

1422 6.0.5 --- Unused WARNING --- IPv6 address conflict detfrom Ethernet address %s

1422 6.2.0 --- Network WARNING --- IPv6 address conflict detfrom Ethernet address %s

ID FirmwareVersion

Legacy Category

SonicOS Category Priority Level

SNMP TrapType

Log Event Message

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 141

3

Syslog events

This section provides information about using the detailed logs created from Syslog events. Syslog settings are configured in the Log > Syslog page in SonicOS.

Topics:

• Log > Syslog on page 142

• Index of Syslog tag field descriptions on page 143

• Examples of standard Syslog messages on page 148

• Examples of ArcSight Syslog messages on page 148

• Legacy categories on page 149

• Expanded categories on page 150

• Priority levels on page 153

Log > SyslogIn addition to the standard event log, the Dell SonicWALL security appliance can send a detailed log to an external Syslog server. The Dell SonicWALL Syslog captures all log activity and includes every connection source and destination IP address, IP service, and number of bytes transferred. Syslog analyzers such as Dell SonicWALL Analyzer or WebTrends Firewall Suite can be used to sort, analyze, and graph the Syslog data.

For more information on configuring the Log > Syslog page, refer to the SonicOS Administration Guide.

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 142

Index of Syslog tag field descriptionsThis section provides an alphabetical listing of Syslog tags and the associated field description. For more information about the “pri” Syslog Tag, see Priority levels on page 153. The value here is taken from the “Priority Level” column of the Index of Log Event Messages on page 6. For more information about the “c” Syslog Tag, see Legacy categories on page 149.

Table 2. Syslog Tags

Tag Tags for Arc-Sight Field Description

<ddd> Syslog message prefix The beginning of each Syslog message has a string of the form <ddd> where ddd is a decimal number indicating facility and priority of the message

af_polid Application Filter Displays the Application Filter Policy ID

af_policy Application Filter Displays the Application Policy name

af_type Application Filter Displays the Application Policy type such as:

• SMTP Client Request

• HTTP Client Request

• HTTP Server Response

• FTP Client Request

• FTP Client Upload File

• FTP Client Download File

• POP3 Client Request

• POP3 Server Response

• FTP Data Transfer

• IPS Content

• App Control Content

• Custom Policy Type

• CFS

af_service Application Filter Displays the Application Policy service name

af_action Application Filter Displays the Application Policy action such as:

• HTTP Block Page

• HTTP Redirect

• Bandwidth Management

• Disable E-Mail Attachment

• FTP Notification Reply

• Reset/Drop

• Block SMTP E-Mail

• Bypass DPI

• CFS Block Page

• Packet Monitor

af_object Application policy object name

Displays the custom Application Policy object name

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 143

ai Active Interface via GMS heartbeat

Displays the Active WAN Interface. Normally it is Primary WAN, but in a failover, it displays the value of the failover default outbound WAN interface, if there is more than one WAN. When there is only one WAN Interface, it is always Primary WAN regardless of the link state

app app Numeric application ID Indicates the application for the applied Syslog. Only displays when Flow Reporting is enabled

appcat appcat Application Control Display the application category when Application Control is enabled

appid appid Application ID Display the application ID when Application Control is enabled

appName Non-Signature Application Name

Indicates the non-signature Application Name that matches the Application ID “app” or “f” of the Syslog; Only displays when Flow Reporting is enabled

arg arg URL Used to render a URL: arg represents the URL path name part

bcastRx bcastRx Interface statistics report Displays the broadcast packets received

bcastTx bcastTx Interface statistics report Displays the broadcast packets transmitted

bid bid Numeric Blade ID Indicates the blade that originated the event and applies only to products with blade architecture

bytesRx bytesRx Interface statistics report Displays the bytes received

bytesTx bytesTX Interface statistics report Displays the bytes transmitted

c cat Message category (legacy only)

Indicates the legacy category number (Note: Dell SonicWALL does not currently send new category information)

category category Blocking code description Applicable only when CFS is enabled, indicates the category of the blocked content such as “Gambling”. This works in conjunction with “code” Blocking code.

catid Rule category Indicates the category ID of the rule

cdur cn3Label Connection Duration Displays the connection duration in milliseconds (ms) and only applies to m=537 “Connection Closed” Syslog

change SWGMSchangeUrl Configuration change webpage

Displays the basename of the firewall web page that performed the last configuration change

code reason Blocking code Indicates the CFS block code

icmpCode cn2 ICMP type and code Indicates the ICMP code

conns Firewall status report via GMS heartbeat

Indicates the number of connections in use

Tag Tags for Arc-Sight Field Description

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 144

contentObject Application Filter Indicates rule name

cs4 Interface Statistics Display interface statistics

deviceOutboundInterface

Interface Indicates interface on which the packet leaves the device

deviceInboundInterface

Interface Indicates interface on which the packet leaves the device

dpt Port Display destination port

dnpt NAT’ed Port Display NAT’ed destination port

dst dst Destination Destination IP address, and optionally, port, network interface, and resolved name

dstV6 dst Destination Destination IPv6 address, and optionally, port, network interface, and resolved name

dstname request URL Displays the URL of accessed Websites and hosts

dstname dstname Notes Indicates additional information such as description of forbidden/deleted email attachments

dstZone cs4Label (destination) Destination zone name Displays destination zone

dur cs6label Numeric, session duration in seconds

Displays the connection duration in seconds; pertains to the activity time of an authenticated user session (such as logout messages)

dyn Firewall status report via GMS heartbeat

Displays the HA and dialup connection state (rendered as “h.d” where “h” is “n” (not enabled), “b” (backup), or “p” (primary) and “d” is “1” (enabled) or “0” (disabled))

f flowType Numeric flow type Indicates the flow type when Flow Reporting is disabled

fw Firewall WAN IP Indicates the WAN IP Address

fwlan Firewall status report via GS heartbeat

Indicates the LAN zone IP address

gcat gcat Group category Display event group category when using Enhanced Syslog

goodRxBytes goodRxBytes SonicPoint statistics report

Indicates the well-formed bytes received

goodTxBytes goodTxBytes SonicPoint statistics report

Indicates the well-formed bytes transmitted

i Firewall status report via GMS heartbeat

Displays the GMS message interval in seconds

id=firewall WebTrends prefix Syntactic sugar for WebTrends (and GMS by habit)

if if Interface statistics report Displays the interface on which statistics are reported

ipscat ipscat IPS message Displays the IPS category

ipspri ipspri IPS message Displays the IPS priority

lic Firewall status report via GMS heartbeat

Indicates the number of licenses for firewalls with limited modes

Tag Tags for Arc-Sight Field Description

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 145

m Message ID Provides the message ID number

mac smac or dmac MAC address Provides the source or destination MAC address

mailFrom Email sender Originator of the email

msg msg Message Displays the message which is composed of either or both a predefined message and a dynamic message containing a string %s or numeric %d argument

n cnt Message count Indicates the number of times even occurs

natDst cs2Label NAT destination IP Displays the NAT’ed destination IP address

natDstV6 cs2Label NAT destination IPv6 Displays the NAT’ed destination IPv6 address

natSrc cs1Label NAT source IP Displays the NAT’ed source IP address

natSrcV6 cs1Label NAT source IPv6 Displays the NAT’ed source IPv6 address

note cs6 Additional Information Additional information that is application-dependent

npcs cs5 URL Applicable only when Network Packet Capture System (NPCS Solera) is enabled, displays URL of an NPCS object

op requestMethod HTTP OP code Displays the value assigned by SonicOS Content Filtering based on its parsing of an HTTP packet’s Method token for the Request message. Supported values are:

• 0 = NO OPERATION

• 1 = HTTP GET

• 2 = HTTP POST

• 3 = HTTP HEAD

where GET/POST/HEAD are standard HTTP Methods and NO OPERATION is used by SonicOS to indicate that none of the other defined values apply.

pri Message priority Displays the event priority level (0=emergency, 7=debug)

proto proto Protocol and service Displays the protocol information (rendered as “proto=[protocol]” or just “[proto]/[service]”)

pt Firewall status report via GMS heartbeat

Displays the HTTP/HTTPS management port (rendered as “hhh.sss”)

radio radio SonicPoint statistics report

Displays the SonicPoint radio on which event occurred

rcptTo recipient Indicates the email recipient

rcvd in Bytes received Indicates the number of bytes received within connection

Tag Tags for Arc-Sight Field Description

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 146

result outcome HTTP Result code Displays the HTTP result code (200, 403, etc.) of Website hit

rpkt cn1Label Packet received Display the number of packet received

rule cs1 Rule ID Displays the Access Rule number causing packet drop. The policy index includes Address Object names

sent out Bytes sent Displays the number of bytes sent within connection

sess cs5Label Pre-defined string indicating session type

Applies to Syslogs with an associated user session being tracked by the UTM. Determined by the Authentication mechanism and can be one of:

• None - the starting session type when user authentication is still pending or just started

• Web - identified as a Web browser session

• Portal - SSL-VPN portal login

• l2tpc - L2TP client session

• vpnc - VPN client session

• sslvpnc - SSL-VPN client session

• Auto - Auto-logged in session, for example Single Sign On (SSO)

sid sid IPS or Anti-Spyware message

Provides either IPS or Anti-Spyware signature ID

sn Firewall serial number Indicates the device serial number

spkt cn2Label Packet sent Display the number of packets sent

spt Port Displays source port

spycat spycat Anti-Spyware message Displays the Anti-Spyware category

spypri spypri Anti-Spyware message Displays the Anti-Spyware priority

snpt NAT source port Display NAT’ed source port

src src Source Indicates the source IP address, and optionally, port, network interface, and resolved name

srcZone cs3Label (source) Source zone name Displays source zone

station station SonicPoint statistics report

Displays the client (station) on which event occurred

time Time Reports the time of event

type cn1 ICMP type and code Indicates the ICMP type

ucastRx ucastRx Interface statistics report Displays the unicast packets received

ucastTx ucastTx Interface statistics report Displays the unicast packets transmitted

unsynched Firewall status report via GMS heartbeat

Reports the time since last local change in seconds

usestandbysa Firewall status report via GMS heartbeat

Displays whether standby SA is in use (“1” or “0”) for GMS management

usr (or user) susr User Displays the user name (“user” is the tag used by WebTrends)

Tag Tags for Arc-Sight Field Description

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 147

Examples of standard Syslog messagesThe following examples show the content of the Syslog packet. This type of message can be viewed on the Syslog server or any packet analyzer application. Note that this is the Default Syslog Format.

id=firewall123 sn=0017C5991784 time="2013-03-20 11:56:53" fw=10.0.203.108 pri=6 c=1024 m=97 n=1 src=1.2.3.4:5432:X0 dst=4.3.2.1:2345:X1 proto=tcp/2345 op=1 sent=9876 rcvd=6789 result=403 dstname=http: arg=//www.gui.log.eng.sonicwall.com code=20 Category="Online Banking"

id=firewall123 sn=0017C5991784 time="2013-03-20 11:57:04" fw=10.0.203.108 pri=6 c=262144 m=98 msg="Connection Opened" n=1437 usr="admin" src=192.168.168.1:61505:X0 dst=192.168.168.168:443:X0 proto=tcp/https sent=52

id=firewall123 sn=0017C5991784 time="2013-03-20 11:57:06" fw=10.0.203.108 pri=6 c=1024 m=537 msg="Connection Closed" n=3683 usr="admin" src=192.168.168.1:61505:X0 dst=192.168.168.168:443:X0 proto=tcp/https sent=1519 rcvd=951 spkt=7 rpkt=8 cdur=2133

id=firewall123 sn=0017C5991784 time="2013-03-20 11:56:53" fw=10.0.203.108 pri=1 c=32 m=609 msg="IPS Prevention Alert: P2P BitTorrent -- Peer Sync" sid=1994 ipscat=P2P ipspri=3 P2P BitTorrent -- Peer Sync, SID: 1994, Priority: Low n=1 src=1.2.3.4:5432:X0 dst=4.3.2.1:2345:X1

id=firewall123 sn=0017C5991784 time="2013-01-29 23:38:24" bid=1 fw=10.8.70.22 pri=1 c=16 m=793 msg="App Rules Alert" af_polid=1 af_policy="test" af_type="SMTP Client Request" af_service="SMTP (Send E-Mail)" af_action="No Action" n=0 src=10.10.10.245:50613:X0 dst=10.8.41.228:25:X1"

id=firewall123 sn=0017C5991784 mgmtip=10.0.203.108 time="2013-03-20 20:14:30 UTC" fw=10.0.203.108 m=96 n=25 i=60 lic=0 unsynched=893 pt=80.443 usestandbysa=0 dyn=n.n ai=1 fwlan=192.168.168.168 conns=0

Examples of ArcSight Syslog messagesThe following examples show the content of the Syslog packet. This type of message can be viewed on the Syslog server or any packet analyzer application.

MAR 20 2013 19:07:43 0017C5991784 CEF:0|SonicWALL|NSA 2400|5.9.0.0-d_75o|97|Syslog Website Accessed|4|cat=1024 gcat=2 src=1.2.3.4 spt=5432 deviceInboundInterface=X0 cs1Label=1.2.4.5 snpt=1 dst=4.3.2.1 dpt=2345 deviceOutboundInterface=X1 cs2Label=5.4.3.2 dnpt=2 proto=tcp/2345 out=9876 in=6789 requestMethod=1 outcome=403 request=http://www.gui.log.eng.sonicwall.com reason=20 Category-"Online Banking"

MAR 20 2013 19:07:49 0017C5991784 CEF:0|SonicWALL|NSA 2400|5.9.0.0-d_75o|98|Syslog Connection Logged|4|cat=262144 gcat=2 src=192.168.168.1 spt=61693 deviceInboundInterface=X0 dst=192.168.168.168 dpt=443 deviceOutboundInterface=X0 susr="admin" proto=tcp/https out=52 cnt=1570

vpnpolicy cs2 (source) Source VPN policy name Displays the source VPN policy name of event

vpnpolicyDst cs3 (destination) Destination VPN policy name

Displays the destination VPN policy name of event

Tag Tags for Arc-Sight Field Description

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 148

MAR 20 2013 19:07:52 0017C5991784 CEF:0|SonicWALL|NSA 2400|5.9.0.0-d_75o|537|Syslog Close|4|cat=1024 gcat=2 smac=00:00:c5:b3:6b:e5 src=192.168.168.1 spt=61693 deviceInboundInterface=X0 cs3Label=Trusted dst=192.168.168.168 dpt=443 deviceOutboundInterface=X0 cs4Label=Trusted susr="admin" proto=tcp/https out=1519 in=967 cn2Label=7 cn1Label=8 cn3Label=2333 cnt=3815

MAR 20 2013 19:07:43 0017C5991784 CEF:0|SonicWALL|NSA 2400|5.9.0.0-d_75o|609|IDP Prevention Alert|9|cat=32 gcat=3 src=1.2.3.4 spt=5432 deviceInboundInterface=X0 cs1Label=1.2.4.5 snpt=1 dst=4.3.2.1 dpt=2345 deviceOutboundInterface=X1 cs2Label=5.4.3.2 dnpt=2 msg="IPS Prevention Alert: P2P BitTorrent -- Peer Sync, SID: 1994, Priority: Low" cnt=3

MAR 20 2013 19:07:43 0017C5991784 CEF:0|SonicWALL|NSA 2400|5.9.0.0-d_75o|793|Application Firewall Alert|9|cat=16 gcat=10 src=1.2.3.4 spt=5432 deviceInboundInterface=X0 dst=4.3.2.1 dpt=2345 deviceOutboundInterface=X1 msg="Application Firewall Alert: Policy: foobar, Action Type: Block SMTP E-Mail - Send Error Reply, Mail From: an unknown string of unknown length" cnt=3

Legacy categoriesThis section can be used as a reference for understanding different categories and their descriptions. The following table describes the Legacy categories shared in all SonicOS releases.

Table 3. Legacy Category Values

ID (used in Syslog) Name Description

0 Event is not Legacy Category, not backward compatible.

1 System Maintenance Logs general system activity, such as system activations.

2 System Errors Logs problems with DNS or Email.

4 Blocked Web Sites Logs Web sites or news groups blocked by the Content Filter List or by customized filtering.

8 Blocked Java Etc Logs Java, ActiveX, and Cookies blocked by the Dell SonicWALL security appliance.

16 User Activity Logs successful and unsuccessful log in attempts.

32 Attacks Logs messages showing Denial of Service attacks, such as SYN Flood, Ping of Death, and IP Spoofing.

64 Dropped TCP Logs blocked incoming TCP connections.

128 Dropped UDP Logs blocked incoming UDP packets.

256 Dropped ICMP Logs blocked incoming ICMP packets.

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 149

Expanded categoriesThe following table displays expanded category information, also known as the SonicOS category, for all firmware releases and platforms.

512 Network Debug Logs NetBIOS broadcasts, ARP resolution problems, and NAT resolution problems. Also, detailed messages for VPN connections are displayed to assist the network administrator with troubleshooting problems with active VPN tunnels. Network Debug information is intended for experienced network administrators.

1024 Syslog Only - For Traffic Reporting Used for Syslog only to report HTTP connections opened and closed, and bytes transferred.

2048 Dropped LAN TCP Used for Syslog only to report that the TCP packet is dropped due to LAN management policy.

4096 Dropped LAN UDP Used for Syslog only to report that the UDP packet is dropped due to LAN management policy.

8192 Dropped LAN ICMP Used for Syslog only to report that the ICMP packet is dropped due to LAN management policy.

32768 Modem Debug Logs Modem Debug activity.

65536 VPN Tunnel Status Logs status information on VPN tunnels.

131072 802.11 Management Logs WLAN IEEE 802.11 connections.

262144 Syslog Only - For Traffic Reporting Used for Syslog only to report that the Network Traffic is logged when connection is open.

524288 System Environment Logs system environment activity.

1048576 Expanded - VOIP Activity Used for Syslog only to log VoIP H.323-RAS, H.323/H.225, and H.323/H.245 activity.

2097152 Expanded - WLAN IDS Activity Used for Syslog only to log WLAN IDS activity.

4194304 Expanded - SonicPoint Activity Used for Syslog only to log SonicPoint activity.

Table 4. Expanded Categories

Category Description

802.11 Management Logs 802.11 management activity

Advanced Routing Logs Advanced Routing activity

Advanced Switching Logs Advanced Switching activity

Anti-Spam Service Logs the Anti-Spam service

App Flow Server Logs App Flow Server activity

App Rules Logs App Rules activity

Table 3. Legacy Category Values

ID (used in Syslog) Name Description

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 150

Application Control Logs Application Control activity

Attacks Logs messages showing Denial of Service attacks, such as SYN Flood, Ping of Death, and IP Spoofing.

Authenticated Access Logs Authenticated Access activity

WAN Acceleration Logs the WAN Acceleration activity

Blocked Java Etc Logs Java, ActiveX, and Cookies blocked

Blocked WebSites Logs Websites blocked

BOOTP Logs Bootstrap Protocol (BOOTP) activity

Botnet Blocking Logs the Botnet Blocking activity

SSO Agent Authentication Logs the SSO Agent Authentication activity

Crypto Test Logs Crypto Test activity

DDNS Logs Dynamic Domain Name System (DDNS) activity

Denied LAN IP Logs LAN IP denied activity

DHCP Client Logs DHCP Client activity

DHCP Relay Logs DHCP Relay activity

DHCP Server Logs DHCP Server activity

DPI-SSL Logs the Deep Packet Inspection of Secure Socket Layer (DPI-SSL) activity

Dropped ICMP Logs blocked incoming Internet Control Message Protocol (ICMP) packet activity

Dropped TCP Logs blocked incoming Transmission Control Protocol (TCP) connection activity

Dropped UDP Logs blocked incoming User Datagram Protocol (UDP) packet activity

DSL Logs DSL activity

Dynamic Address Objects Logs Dynamic Address Object activity

E1-T1 Logs E1-T1 activity

Firewall Event Logs Firewall Event alerts and activity

Firewall Hardware Logs Firewall Hardware alerts and activity

Firewall Logging Logs other Firewall-related activity

Firewall Rule Logs Firewall Rule alerts and activity

FTP Logs File Transfer Protocol (FTP) activity

Geolocation Logs the Geolocation service activity

Table 4. Expanded Categories

Category Description

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 151

GMS Logs Dell SonicWALL Global Management System (GMS) activity

High Availability Logs High Availability activity

Intrusion Prevention Logs Intrusion Prevention activity

IPComp Logs IP Compression (IPComp) activity

IPNet Logs IPNet activity

IPv6 Tunnel Logs IPv6 activity

L2TP Client Logs Layer 2 Tunnel Protocol (L2TP) client activity

L2TP Server Logs Layer 2 Tunnel Protocol (L2TP) server activity

MAC-IP Anti-Spoof Logs the MAC-IP Spoofing activity

Modem Logs the Modem activity

Modem Debug Logs the Modem Debug activity

MSAD Logs Microsoft Active Directory (MSAD) activity

Multicast Logs Multicast activity

Network Logs Network activity

Network Debug Logs NetBios broadcasts, ARP resolution problems, and NAT resolution problems

Network Access Logs successful and unsuccessful Network Access activity

Network Monitor Logs Network Monitor activity

Network Traffic Logs Network Traffic activity

PPP Logs Point-to-Point (PPP) activity

PPP Dial-Up Logs Point-to-Point (PPP) Dial-Up activity

PPPoE Logs Point-to-Point Protocol over Ethernet (PPPoE) activity

PPTP Logs Point-to-Point Tunneling Protocol (PPTP) activity

Remote Authentication Logs Remote Authentication activity

RBL Logs Realtime Blackl LIST (RBL) activity

RF Monitoring Logs RF Monitoring activity

Security Services Logs Security Services activity

SNMP Logs the Simple Network Management Protocol (SNMP) activity

SonicPoint Logs the SonicPoint activity

SonicPointN Logs the SonicPointN activity

SSLVPN Logs Secure Socket Layer Virtual Private Network (SSLVPN) activity

System Environment Logs System Environment activity

Table 4. Expanded Categories

Category Description

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 152

Priority levelsThe following table displays the Priority Number and Name for Syslog Tags. The value here is taken from the “Priority Level column of the Index of Log Event Messages on page 6, or the “pri” tag in Index of Syslog tag field descriptions on page 143. For example, a tag with “pri=0” means Emergency Priority.

Table 5. Priority Level

System Errors Logs System Errors activity

System Maintenance Logs System Maintenance activity

User Activity Logs successful and unsuccessful log in attempts

VOIP Logs Voice over IP (VOIP) activity

VPN Logs Virtual Private Network (VPN) activity

VPN Tunnel Status Logs VPN Tunnel Status activity

VPN Client Logs VPN Client activity

VPN IKE Logs VPN IKE activity

VPN IPSec Logs VPN IP Security activity

WAN Availability Logs WAN Availability activity

Wireless Logs Wireless activity

WLAN IDS Logs Wireless LAN Intrusion Detection System (IDS) activity

Priority Number Priority Name

0 Emergency

1 Alert

2 Critical

3 Error

4 Warning

5 Notice

6 Info

7 Debug

Table 4. Expanded Categories

Category Description

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 153

About Dell

Dell listens to customers and delivers worldwide innovative technology, business solutions, and services they trust and value. For more information, visit http://www.software.dell.com.

Contacting DellFor sales or other inquiries, visit http://software.dell.com/company/contact-us.aspx or call 1-949-754-8000.

Technical support resourcesTechnical support is available to customers who have purchased Dell software with a valid maintenance contract and to customers who have trial versions.

The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. In addition, the Support Portal provides direct access to product support engineers through an online Service Request system. To access the Support Portal, go to https://support.software.dell.com.

The Support Portal enables you to:

• Create, update, and manage Service Requests (cases).

• View Knowledge Base articles.

• Obtain product notifications.

• Download software. For trial software, go to http://software.dell.com/trials.

• View how-to videos.

• Engage in community discussions.

• Chat with a support engineer.

Dell SonicWALL SonicOS 5.9/6.0.5/6.2 Log Events Reference Guide 154