Home  Prev  cOS Core 15.00.01 Log Reference Guide  Next

2.6. APPCONTROL

These log messages refer to the APPCONTROL (Application Control events) category.

2.6.1. application_identified (ID: 07200001)

Default Severity
INFORMATIONAL
Log Message
Application identified. Application: <application>.
Explanation
An application protocol has been recognized by the application control function.
Firewall Action
allow
Recommended Action
None
Revision
3
Parameters
application
applicationrule
applicationruleset
Context Parameters
Connection
Rule Information

2.6.2. application_identified (ID: 07200002)

Default Severity
INFORMATIONAL
Log Message
Application identified. Application: <application>.
Explanation
An application protocol has been recognized by the application control function.
Firewall Action
close
Recommended Action
None
Revision
4
Parameters
application
applicationrule
applicationruleset
applicationpath
Context Parameters
Connection
Rule Information

2.6.3. application_end (ID: 07200003)

Default Severity
INFORMATIONAL
Log Message
Application ended. Application: <application>.
Explanation
The end of an application protocol has been recognized by the application control function.
Firewall Action
None
Recommended Action
None
Revision
3
Parameters
application
family
risk
origsent
termsent
Context Parameters
Connection

2.6.4. no_valid_license (ID: 07200004)

Default Severity
CRITICAL
Log Message
Application Control disabled
Explanation
Application Control has been disabled due to license restriction.
Firewall Action
application_control_disabled
Recommended Action
Extend valid time for Application Control.
Revision
3

2.6.5. application_control_disabled (ID: 07200005)

Default Severity
CRITICAL
Log Message
Application Control disabled
Explanation
Application Control has been disabled due fatal subsystem failure. Traffic will be treated as 'unknown' by Application Control.
Firewall Action
treat_traffic_as_unknown
Recommended Action
Restart the device or restore the system from a full system backup to restore Application Control functionality. It is also possible to configure the device to automatically restart if Application Control is disabled due to fatal failure through the Application Control setting 'Restart On Fatal Failure'.
Revision
1

2.6.6. application_control_disabled (ID: 07200006)

Default Severity
CRITICAL
Log Message
Application Control disabled
Explanation
Application Control has been disabled due fatal subsystem failure. The device will restart itself to try to restore Application Control functionality.
Firewall Action
restart
Recommended Action
It is also possible to configure the device continue with Application Control disabled through the Application Control setting 'Restart On Fatal Failure'.
Revision
1

2.6.7. application_identified (ID: 07200007)

Default Severity
INFORMATIONAL
Log Message
Application identified. Application: <application>.
Explanation
An application protocol has been recognized by the application control function.
Firewall Action
None
Recommended Action
None
Revision
1
Parameters
application
applicationpath
Context Parameters
Rule Information
Packet Buffer

2.6.8. application_content (ID: 07200015)

Default Severity
INFORMATIONAL
Log Message
Application attribute found. Application: <application> Attribute: <attribute> Value: <value>
Explanation
An application attribute has been identified by Application Content Control.
Firewall Action
None
Recommended Action
None
Revision
1
Parameters
application
attribute
value
Context Parameters
Connection

2.6.9. application_content_allowed (ID: 07200016)

Default Severity
WARNING
Log Message
Application content allowed. Application: <application> Attribute: <attribute> Value: <value>
Explanation
The identified application attribute and its value is allowed by the Application Content Control policy.
Firewall Action
None
Recommended Action
Modify the Application Content Control policy if this traffic should be denied.
Revision
1
Parameters
application
attribute
value
Context Parameters
Connection

2.6.10. application_content_denied (ID: 07200017)

Default Severity
WARNING
Log Message
Application content denied. Application: <application> Attribute: <attribute> Value: <value>
Explanation
The configured Application Content Control policy does not allow the identified attribute or its value. The connection is closed.
Firewall Action
close
Recommended Action
Modify the Application Content Control policy if this traffic should be allowed.
Revision
1
Parameters
application
attribute
value
Context Parameters
Connection

2.6.11. out_of_memory (ID: 07200018)

Default Severity
ERROR
Log Message
Out of memory
Explanation
Failed to allocate memory for Application Content Control.
Firewall Action
None
Recommended Action
Modify the units configuration to make more RAM available.
Revision
1
Context Parameters
Connection

2.6.12. application_content_limit_reached (ID: 07200019)

Default Severity
ERROR
Log Message
Maximum number of concurrent non-classified (in progress) application control connections (50.000) reached.
Explanation
There is a maximum of 50.000 Application Content Control attributes to store until connections have been fully classified. This limit has been reached. Application Content Control is disabled for this connection until the connection has been fully classified.
Firewall Action
None
Recommended Action
None
Revision
1
Context Parameters
Connection

Home  Prev   Next