Cisco Cisco Email Security Appliance C160 Mode D'Emploi
34-45
User Guide for AsyncOS 10.0 for Cisco Email Security Appliances
Chapter 34 System Administration
Alerts
Updater Alerts
contains a list of the varius Updater alerts that can be generated by AsyncOS.
SYSTEM.
RCPTVALIDATION.UPDATE_FAILED
RCPTVALIDATION.UPDATE_FAILED
Error updating recipient validation data: $why
’why’ - The error message.
Critical. Sent when a recipient validation update failed.
SYSTEM.SERVICE_
TUNNEL.DISABLED
TUNNEL.DISABLED
Tech support: Service tunnel has been disabled
Information. Sent when a tunnel created for Cisco Support
Services is disabled.
Services is disabled.
SYSTEM.SERVICE_
TUNNEL.ENABLED
TUNNEL.ENABLED
Tech support: Service tunnel has been enabled, port $port
’port’ - The port used for
the service tunnel.
the service tunnel.
Information. Sent when a tunnel created for Cisco Support
Services is enabled.
Services is enabled.
IPBLOCKD.HOST_ADDED_TO_WHI
TELIST
TELIST
IPBLOCKD.HOST_ADDED_TO_BLA
CKLIST
CKLIST
IPBLOCKD.HOST_REMOVED_FRO
M_BLACKLIST
M_BLACKLIST
The host at $ip has been added to the blacklist because of an
SSH DOS attack.
SSH DOS attack.
The host at $ip has been permanently added to the ssh
whitelist.
whitelist.
The host at $ip has been removed from the blacklist
’ip’ - IP address from which
a login attempt occurred.
a login attempt occurred.
Warning.
IP addresses that try to connect to the appliance over SSH but
do not provide valid credentials are added to the SSH blacklist
if more than 10 failed attempts occur within two minutes.
do not provide valid credentials are added to the SSH blacklist
if more than 10 failed attempts occur within two minutes.
When a user logs in successfully from the same IP address,
that IP address is added to the whitelist.
that IP address is added to the whitelist.
Addresses on the whitelist are allowed access even if they are
also on the blacklist.
also on the blacklist.
Entries are automatically removed from the blacklist after
about a day.
about a day.
Table 34-7
Listing of Possible System Alerts (continued)
Component/Alert Name
Message and Description
Parameters
Table 34-8
Listing of Possible Updater Alerts
Alert Name
Message and Description
Parameters
UPDATER.APP.UPDATE_ABANDO
NED
NED
$app abandoning updates until a new version is published.
The $app application tried and failed $attempts times to
successfully complete an update. This may be due to a
network configuration issue or temporary outage
The $app application tried and failed $attempts times to
successfully complete an update. This may be due to a
network configuration issue or temporary outage
‘app’ - The application
name.
name.
‘attempts’ - The number of
attempts tried.
attempts tried.
Warning. The application is abandoning the update.
UPDATER.UPDATERD.MANIFEST_
FAILED_ALERT
FAILED_ALERT
The updater has been unable to communicate with the update
server for at least $threshold.
server for at least $threshold.
‘threshold’ - Human
readable threshold string.
readable threshold string.
Warning. Failed to acquire a server manifest.