EX SSL-VPN: Log Messages for EPC Zone Classification

Description

EX SSL-VPN: Log Messages for EPC Zone Classification

Resolution

Overview

This article describes what is recorded in the log files when a user's computer is classified during EPC (End Point Control) interrogation. 

More Information

The type of message that is logged depends on the logging level:

  • At INFO, messages for each zone classification attempt are logged
  • At VERBOSE, messages describe the reason why zone classification failed

 

Log Level

Text of Error Message

Description of Error

INFO

avtZone(<name>): No client profiles, zone ALWAYS matches.

Indicates that this zone matched because it has no signatures and will match ANY zone query.

INFO

avtZone(<name>): Match for Client Profile '<name>'

Indicates a successful zone match, and which client profile it matched for this zone.

INFO

avtZone(<name>): Using default zone in avtRealm(<name>).

Indicates that the default zone in the realm was used because no other matching zone was found.

INFO

avtZone(<name>): Using connect zone in avtRealm(<name>).

Indicates that the connect zone in the realm was used because this is a Connect proxy connection with no EPC info.

INFO

avtZone(<name>): Using global default zone.

Indicates that the global default zone was used because no other matching zone was found in the realm, and no default zone was found in the realm.

VERBOSE

avtZone(<name>): No Match, Unable to find any Client Profile that matches.

Unable to find any client profile (signature) that matched; did not match this zone.

VERBOSE

avtZone(<name>): No Match platform: Client Profile '<name>', connection='<name>', policy='<name>'

The platform of the user's system was different from the platform in the client profile so the client profile will not match.  The value (policy='<name>') is reported in the policy file.

VERBOSE

avtZone(<name>): No match for Client Profile '<name>', artifact '<name>' has false value.

A required artifact returned a false value, which resulted in the zone not matching.

VERBOSE

avtZone(name): No match for Client Profile '<name>', artifact '<name>' was not returned by macro interrogator.

A required artifact was not found in the list returned by the macro interrogator, which resulted in the zone not matching.

Related Articles

  • SMA100 End of Support No-Charge Replacement FAQ
    Read More
  • SMA1000: Post upgrade to 12.5.0 on AWS and Azure, we show the error Could not retrieve the DNS settings once we log in to AMC/CMS console
    Read More
  • Firmware version required to upgrade to version 12.5.0.
    Read More
not finding your answers?