Cisco Cisco Content Security Management Appliance M160 Guía Del Usuario

Alert messages: 

The host at <IP address> has been added to the 
blacklist because of an SSH DOS attack.

The host at <IP address> has been permanently 
added to the ssh whitelist. 

The host at <IP address> has been removed from the 
blacklist 

IP addresses that try to connect to the appliance over SSH 
but do not provide valid credentials are added to the SSH 
blacklist if more than 10 failed attempts occur within two 
minutes. 

When a user logs in successfully from the same IP 
address, that IP address is added to the whitelist. 

Addresses on the whitelist are allowed access even if they 
are also on the blacklist. 

Warning

Sent when an LDAP group query fails.

Critical

Sent when an LDAP query fails completely (after trying 
all servers).

Critical

Various logging errors.

Critical

Sent when an LDAP group query fails during 
per-recipient scanning.

Critical

Various mail queue hard errors.

Critical

Sent when RAM utilization has exceeded the system 
resource conservation threshold.

Critical

Sent when the mail queue is overloaded and system 
resource conservation is enabled.

Critical

Sent when queue utilization has exceeded the system 
resource conservation threshold.

Critical

Sent when listeners are suspended because the work 
queue size is too big.

Critical

Sent when the appliance enters “resource conservation” 
mode.

Critical

Sent when the appliance leaves “resource conservation” 
mode.

Critical

Sent when the work queue is paused.

Critical

Sent when the work queue is resumed.

Critical

Sent when the appliance is unable to adjust time because 
NTP is not running as root.

Warning

Sent when errors are found in the domain specification 
file.

Critical