Network Security Management System Events Reference Guide
NSM SaaS System Events
The following table provides the list of default system events that are supported for NSM SaaS. The table provides information such as the ID, Name, Group and the Event.
| ID | Name | Group | Event |
|---|---|---|---|
| 4 | Activate Firewall | Status | System |
| 5 | Clear Log | General | Log |
| 6 | E-mail Log | Log | |
| 10 | Setting Error on Load | General | Security Services |
| 12 | E-mail Check Error on Load | Log | |
| 14 | Website Blocked | Content Filter | Security Services |
| 16 | Website Accessed | Content Filter | Security Services |
| 24 | User Disconnect Detected | Authentication Access | Users |
| 29 | Successful Admin Login | Authentication Access | Users |
| 30 | Wrong Admin Password | Authentication Access | Users |
| 31 | Successful User Login | Authentication Access | Users |
| 32 | Wrong User Password | Authentication Access | Users |
| 33 | Unknown User Login Attempt | Authentication Access | Users |
| 34 | Login Timeout | Authentication Access | Users |
| 35 | Admin Login Disabled | Authentication Access | Users |
| 53 | Connection Cache Full | Status | System |
| 58 | Too Many IP on LAN | Interfaces | Network |
| 61 | Out of Memory | VPN IPsec | VPN |
| 65 | Illegal SPI | VPN IPsec | VPN |
| 67 | IPsec Authenticate Failure | VPN IPsec | VPN |
| 69 | Incompatible SA | VPN IPsec | VPN |
| 70 | Illegal IPsec Peer | VPN IPsec | VPN |
| 81 | Smurf Attack | Attacks | Security Services |
| 82 | Port Scan Possible | Attacks | Security Services |
| 83 | Port Scan Probable | Attacks | Security Services |
| 84 | Name Resolve Failed | DNS | Network |
| 87 | IPsec Proposal Accepted | VPN IKE | VPN |
| 88 | IPsec Proposal Rejected | VPN IKE | VPN |
| 89 | IPsec SA Added | VPN IKE | VPN |
| 93 | Suspend Reboot | Restart | System |
| 94 | Deadlock Reboot | Restart | System |
| 95 | Low Memory Reboot | Restart | System |
| 99 | DHCPC Retransmit Discover | DHCP Client | Network |
| 100 | DHCPC Retransmit Request | DHCP Client | Network |
| 101 | DHCPC Retransmit Request Renew | DHCP Client | Network |
| 102 | DHCPC Retransmit Request Rebind | DHCP Client | Network |
| 103 | DHCPC Retransmit Request Reboot | DHCP Client | Network |
| 104 | DHCPC Retransmit Request Verify | DHCP Client | Network |
| 105 | DHCPC Discover | DHCP Client | Network |
| 106 | DHCPC No Offer | DHCP Client | Network |
| 107 | DHCPC Offer Receive | DHCP Client | Network |
| 108 | DHCPC Selecting | DHCP Client | Network |
| 109 | DHCPC Request Failed | DHCP Client | Network |
| 110 | DHCPC Request NAK | DHCP Client | Network |
| 111 | DHCPC Request ACK | DHCP Client | Network |
| 112 | DHCPC Request Decline | DHCP Client | Network |
| 113 | DHCPC Bound Rebind | DHCP Client | Network |
| 114 | DHCPC Bound Renew | DHCP Client | Network |
| 115 | DHCPC Request Renew | DHCP Client | Network |
| 116 | DHCPC Request Rebind | DHCP Client | Network |
| 117 | DHCPC Request Reboot | DHCP Client | Network |
| 118 | DHCPC Request Verify | DHCP Client | Network |
| 119 | DHCPC Verify Initiation Failed | DHCP Client | Network |
| 121 | DHCPC Get New IP | DHCP Client | Network |
| 122 | DHCPC Send Release | DHCP Client | Network |
| 123 | AV Access Without Agent | Anti-Virus | Security Services |
| 124 | AV Agent Out of Date | Anti-Virus | Security Services |
| 125 | AV Alert Receive | Anti-Virus | Security Services |
| 127 | PPPoE Start | PPPoE | Network |
| 128 | PPPoE Link Up | PPPoE | Network |
| 129 | PPPoE Link Down | PPPoE | Network |
| 130 | PPPoE Link Finish | PPPoE | Network |
| 131 | PPPoE Network Up | PPPoE | Network |
| 132 | PPPoE Network Down | PPPoE | Network |
| 133 | PPPoE Discover Complete | PPPoE | Network |
| 134 | PPPoE CHAP Authentication | PPPoE | Network |
| 138 | WAN IP Change | Interfaces | Network |
| 139 | XAUTH Success | VPN Client | VPN |
| 140 | XAUTH Failure | VPN Client | VPN |
| 141 | XAUTH Timeout | VPN Client | VPN |
| 144 | HA Active Primary | State | High Availability |
| 145 | HA Active Secondary | State | High Availability |
| 146 | HA Standby Primary | State | High Availability |
| 147 | HA Standby Secondary | State | High Availability |
| 148 | HA Primary Missed Heartbeat | Synchronization | High Availability |
| 149 | HA Secondary Missed Heartbeat | Synchronization | High Availability |
| 150 | HA Primary Error Receive | State | High Availability |
| 151 | HA Secondary Error Receive | State | High Availability |
| 153 | HA Primary Preempt | State | High Availability |
| 157 | HA Sync HA Peer | Synchronization | High Availability |
| 158 | HA Sync Error | Synchronization | High Availability |
| 159 | AV Expire message | Anti-Virus | Security Services |
| 164 | HTTP Server Reboot | Restart | System |
| 165 | Allow E-mail Attachment | E-mail Filtering | Security Services |
| 168 | PPPoE Traffic Timeout | PPPoE | Network |
| 169 | PPPoE LCP Unack | PPPoE | Network |
| 171 | IPsec Dead Peer Detection | VPN IKE | VPN |
| 199 | Admin Login From CLI | Authentication Access | Users |
| 200 | Admin Password Error From CLI | Authentication Access | Users |
| 211 | L2TP Net Down | L2TP Client | Network |
| 235 | Admin VPN Login | Authentication Access | Users |
| 236 | Admin WAN Login | Authentication Access | Users |
| 237 | User VPN Login | Authentication Access | Users |
| 238 | User WAN Login | Authentication Access | Users |
| 239 | VPN Peer Behind NAT Device | VPN IKE | VPN |
| 240 | VPN Local Behind NAT Device | VPN IKE | VPN |
| 241 | VPN No NAT Device Detected | VPN IKE | VPN |
| 242 | VPN Peer Does Not Support NAT | VPN IKE | VPN |
| 243 | User Login Failed | Radius Authentication | Users |
| 244 | User Login Timeout | Radius Authentication | Users |
| 245 | User Login Error | Radius Authentication | Users |
| 246 | User Login From Wrong Location | Authentication Access | Users |
| 248 | E-mail Attachment | E-mail Filtering | Security Services |
| 249 | Bad Tunnel Mode | VPN IKE | VPN |
| 250 | Phase 1 ID Mismatch | VPN IKE | VPN |
| 251 | Bad Remote Network | VPN IKE | VPN |
| 252 | No Remote Network Match | VPN IKE | VPN |
| 253 | Default Gateway Not Match Proposal | VPN IKE | VPN |
| 254 | Tunnel Terminates Outside | VPN IKE | VPN |
| 255 | Tunnel Terminates Inside | VPN IKE | VPN |
| 256 | Tunnel Terminates DMZ | VPN IKE | VPN |
| 257 | Tunnel Terminates LAN | VPN IKE | VPN |
| 258 | AH PFS Mismatch | VPN IKE | VPN |
| 259 | ESP PFS Mismatch | VPN IKE | VPN |
| 260 | Algorithm or Key Mismatch | VPN IKE | VPN |
| 261 | Admin Logout | Authentication Access | Users |
| 262 | Admin Logout - Timer Expire | Authentication Access | Users |
| 263 | User Logout | Authentication Access | Users |
| 264 | User Logout - Max Session | Authentication Access | Users |
| 265 | User Logout - Timer Expire | Authentication Access | Users |
| 266 | IPsec AH Does Not Support NAT | VPN IPsec | VPN |
| 267 | TCP Xmas Tree Attack | Attacks | Security Services |
| 269 | CRL Request | VPN PKI | VPN |
| 270 | CRL Download Success | VPN PKI | VPN |
| 271 | CRL Download Failed | VPN PKI | VPN |
| 272 | CRL Failed - No Memory | VPN PKI | VPN |
| 273 | CRL Failed - Timeout | VPN PKI | VPN |
| 274 | CRL Failed - No Connect | VPN PKI | VPN |
| 275 | CRL Failed - No Reason | VPN PKI | VPN |
| 276 | CRL Process Failed | VPN PKI | VPN |
| 277 | CRL Bad Format | VPN PKI | VPN |
| 278 | CRL Wrong Issuer | VPN PKI | VPN |
| 279 | CRL Certificate Revoke | VPN PKI | VPN |
| 280 | No Certificate | VPN PKI | VPN |
| 289 | PPP Authenticate Success | PPP | Network |
| 290 | PPP PAP Failed | PPP | Network |
| 291 | PPP CHAP Failed | PPP | Network |
| 292 | PPP MS-CHAP Failed | PPP | Network |
| 293 | PPP MS-CHAP Start | PPP | Network |
| 294 | PPP CHAP Start | PPP | Network |
| 295 | PPP PAP Start | PPP | Network |
| 307 | WAN Mode | Failover and Load Balancing | Network |
| 326 | Probe Failed | Failover and Load Balancing | Network |
| 328 | Admin Name Change | Authentication Access | Users |
| 329 | User Login Lockout | Authentication Access | Users |
| 339 | NAT Overwrite | NAT | Network |
| 340 | HTTP Port Change | Administration | System |
| 341 | HTTPS Port Change | Administration | System |
| 346 | Quick Mode Started | VPN IKE | VPN |
| 348 | VPN SA Import Invalid | VPN IPsec | VPN |
| 350 | IKE SA Life Expired | VPN IKE | VPN |
| 351 | IKE Main Mode Started | VPN IKE | VPN |
| 352 | IKE Quick Mode Request Received | VPN IKE | VPN |
| 353 | Initial Main Mode Completed | VPN IKE | VPN |
| 354 | Initial Aggressive Mode Completed | VPN IKE | VPN |
| 355 | Responder Main Mode Request Received | VPN IKE | VPN |
| 356 | Responder Aggressive Mode Request Received | VPN IKE | VPN |
| 357 | Responder Main Mode Completed | VPN IKE | VPN |
| 358 | Aggressive Mode Started | VPN IKE | VPN |
| 371 | Client Policy Provisioned | VPN Client | VPN |
| 372 | IKE Initiator: Accept Proposal | VPN IKE | VPN |
| 373 | IKE Responder: Aggressive Mode Complete | VPN IKE | VPN |
| 401 | No Proposal Chosen | VPN IKE | VPN |
| 402 | Proposal Rejected | VPN IKE | VPN |
| 403 | Negotiation Aborted | VPN IKE | VPN |
| 404 | Decryption Failed: Key Mismatch | VPN IKE | VPN |
| 405 | Payload Validation Failed | VPN IKE | VPN |
| 406 | Duplicate Packet Dropped | VPN IKE | VPN |
| 408 | AV License Exceeded | Anti-Virus | Security Services |
| 409 | Authentication Failed | VPN IKE | VPN |
| 410 | Hash Failed | VPN IKE | VPN |
| 411 | Notification on Malformed Payload | VPN IKE | VPN |
| 412 | Receive IPsec Delete Request | VPN IKE | VPN |
| 413 | Receive IKE Delete Request | VPN IKE | VPN |
| 414 | Invalid Cookies | VPN IKE | VPN |
| 415 | Notification on Responder Lifetime | VPN IKE | VPN |
| 416 | Notification on Invalid SPI | VPN IKE | VPN |
| 427 | IPsec Tunnel Status Changed | VPN IPsec | VPN |
| 428 | Drop Source Route Packet | Advanced | Firewall Settings |
| 434 | Manual Alternate Profile | Failover and Load Balancing | Network |
| 435 | WLB Failback | Failover and Load Balancing | Network |
| 436 | WLB Probe Success | Failover and Load Balancing | Network |
| 437 | E-mail Fragment Dropped | E-mail Filtering | Security Services |
| 438 | User Login Lockout Expired | Authentication Access | Users |
| 439 | User Login Lockout Clear | Authentication Access | Users |
| 440 | Rule Added | Security Policy | Firewall |
| 441 | Rule Modified | Security Policy | Firewall |
| 442 | Rule Deleted | Security Policy | Firewall |
| 445 | IKE Initiator: Peer Lifetime Accept | VPN IKE | VPN |
| 446 | FTP Passive Attack | FTP | Firewall Settings |
| 448 | PKI Output Buffer Failure | VPN PKI | VPN |
| 449 | PKI Allocate Memory Failure | VPN PKI | VPN |
| 450 | PKI Certificate Failure | VPN PKI | VPN |
| 451 | PKI Import Failure | VPN PKI | VPN |
| 452 | PKI Bad Password | VPN PKI | VPN |
| 453 | PKI CA Certificate Failure | VPN PKI | VPN |
| 454 | PKI Import File Format Failure | VPN PKI | VPN |
| 455 | PKI Certificate ID Failure | VPN PKI | VPN |
| 456 | PKI Key Mismatch | VPN PKI | VPN |
| 457 | PKI Local Certificate Name Duplicate | VPN PKI | VPN |
| 458 | PKI Local Certificate Duplicate | VPN PKI | VPN |
| 459 | PKI No Certificate | VPN PKI | VPN |
| 460 | PKI Internal Error | VPN PKI | VPN |
| 461 | PKI No Resource | VPN PKI | VPN |
| 462 | PKI Certificate Chain Circular | VPN PKI | VPN |
| 463 | PKI Certificate Chain Incomplete | VPN PKI | VPN |
| 464 | PKI Certificate Chain No Root | VPN PKI | VPN |
| 465 | PKI Certificate Expire | VPN PKI | VPN |
| 466 | PKI Certificate Invalid | VPN PKI | VPN |
| 467 | PKI Certificate Corrupt | VPN PKI | VPN |
| 468 | PKI Certificate Bad Signature | VPN PKI | VPN |
| 469 | PKI Certificate Not Verified | VPN PKI | VPN |
| 470 | PKI Certificate Chain Not Verified | VPN PKI | VPN |
| 482 | AV Expiration Warning | Anti-Virus | Security Services |
| 483 | Invalid ID | VPN IPsec | VPN |
| 486 | WLAN User Login Deny | Authentication Access | Users |
| 491 | E-mail Filtering Expiration Warning | E-mail Filtering | Security Services |
| 492 | E-mail Filtering Expiration Message | E-mail Filtering | Security Services |
| 493 | ISDN Update | Interfaces | Network |
| 494 | GVC License Exceed | VPN Client | VPN |
| 496 | DEA Registration | General | Security Services |
| 502 | WAN Not Ready | Interfaces | Network |
| 505 | Blocked Quick Mode With Default Key ID | VPN Client | VPN |
| 506 | VPN Disabled | Authentication Access | Users |
| 507 | VPN Enabled | Authentication Access | Users |
| 508 | WLAN Disabled | Authentication Access | Users |
| 509 | WLAN Enabled | Authentication Access | Users |
| 518 | WLAN 802.11 Management | WLAN | Wireless |
| 520 | Admin Logout From CLI | Authentication Access | Users |
| 521 | Initializing | Status | System |
| 527 | FTP Port Bounce Attack | FTP | Firewall Settings |
| 528 | FTP Passive Bounce Attack | FTP | Firewall Settings |
| 529 | GVC Not Authorized | VPN Client | VPN |
| 533 | ESP Drop | VPN IPsec | VPN |
| 534 | AH Drop | VPN IPsec | VPN |
| 535 | ESP Connection Drop | VPN IPsec | VPN |
| 538 | FTP Data Port | FTP | Firewall Settings |
| 543 | Negotiation on Second GW | VPN IKE | VPN |
| 544 | Initiator: Bound Scope Mismatch | VPN IKE | VPN |
| 545 | Responder: Bound Scope Mismatch | VPN IKE | VPN |
| 546 | Rogue AP or MitM AP Found | WLAN IDS | Wireless |
| 548 | WLAN Association Flood | WLAN IDS | Wireless |
| 549 | WLAN Guest Limit | Authentication Access | Users |
| 550 | WLAN Session Timeout | Authentication Access | Users |
| 551 | WLAN Account Timeout | Authentication Access | Users |
| 557 | WLAN Guest Already Login | Authentication Access | Users |
| 558 | WLAN Guest Create | Authentication Access | Users |
| 559 | WLAN Guest Delete | Authentication Access | Users |
| 560 | WLAN Guest Disable | Authentication Access | Users |
| 561 | WLAN Guest Re-enable | Authentication Access | Users |
| 562 | WLAN Guest Prune | Authentication Access | Users |
| 564 | WLAN Idle Timeout | Authentication Access | Users |
| 565 | Multi-Interface Link Up | Interfaces | Network |
| 566 | Multi-Interface Link Down | Interfaces | Network |
| 567 | Multi-Interface Shutdown | Interfaces | Network |
| 568 | Multi-Interface Bind Initiate | Interfaces | Network |
| 569 | Network Overlap | Interfaces | Network |
| 570 | Invalid Network | Interfaces | Network |
| 573 | Preferences Too Big | Settings | System |
| 574 | Preferences Defaulted | Settings | System |
| 576 | Fan Failure | Hardware | System |
| 577 | Thermal Yellow | Hardware | System |
| 578 | Thermal Red | Hardware | System |
| 579 | Thermal Red Timer Exceeded | Hardware | System |
| 581 | WLB Spill-Over Start | Failover and Load Balancing | Network |
| 582 | WLB Spill-Over Stop | Failover and Load Balancing | Network |
| 583 | User Login Disable | Authentication Access | Users |
| 584 | WLB Failover | Failover and Load Balancing | Network |
| 585 | WLB Resource Available | Failover and Load Balancing | Network |
| 586 | WLB Resource Failed | Failover and Load Balancing | Network |
| 587 | Header Verification Failed | VPN IKE | VPN |
| 588 | Offer Error | DHCP Client | Network |
| 589 | Request Response Error | DHCP Client | Network |
| 593 | Receive PAD Offer | PPPoE | Network |
| 594 | Receive PAD Conffirm | PPPoE | Network |
| 595 | Sending PADR | PPPoE | Network |
| 599 | Stack Margin Reboot | Restart | System |
| 600 | Delete Reboot | Restart | System |
| 601 | Delete Stack Reboot | Restart | System |
| 605 | Received Unencrypted Packet | VPN IKE | VPN |
| 607 | ISAKMP Packet on Wrong Port | VPN IKE | VPN |
| 608 | IPS Detection Alert | IPS | Security Services |
| 609 | IPS Prevention Alert | IPS | Security Services |
| 614 | IDP Expiration Message | General | Security Services |
| 617 | WLAN Mode Not With DHCP | WLAN | Wireless |
| 646 | Source IP Connection Limit | Security Policy | Firewall |
| 647 | Destination IP Connection Limit | Security Policy | Firewall |
| 648 | Illegal Destination | VPN IPsec | VPN |
| 651 | IPcomp Interrupt Error | IPcomp | Network |
| 652 | IPcomp Packet Drop | IPcomp | Network |
| 653 | IPcomp Packet Drop | Waiting | IPcomp |
| 654 | Maximum Events Rate Exceeded | General | Log |
| 655 | Maximum Syslog Data Rate Exceeded | Syslog | Log |
| 656 | POP-Before-SMTP Authentication Failed | Log | |
| 657 | Syslog Server Unreachable | Syslog | Log |
| 658 | Responder: IKE ID mismatch | VPN IKE | VPN |
| 659 | Responder: Duplicate Entry in Relay Table | VPN Client | VPN |
| 660 | Responder: Static IP Not Allowed | VPN Client | VPN |
| 661 | Invalid Payload | VPN IKE | VPN |
| 662 | Non SonicPoint Traffic Drop | SonicPoint | Wireless |
| 667 | SonicPoint Status | SonicPoint | Wireless |
| 668 | HA Peer Firewall Reboot | State | High Availability |
| 669 | Error Rebooting HA Peer Firewall | State | High Availability |
| 670 | HA License Error | General | High Availability |
| 671 | Reboot Signal From Secondary | State | High Availability |
| 672 | Reboot Signal From Primary | State | High Availability |
| 674 | Probe Success | Monitoring | High Availability |
| 675 | Probe Failed | Monitoring | High Availability |
| 706 | Host Down | Network Monitor | Network |
| 707 | Host Up | Network Monitor | Network |
| 719 | Bad SA Count | VPN IPsec | VPN |
| 720 | Send LCP Echo Request | PPPoE | Network |
| 721 | Receive LCP Echo Request | PPPoE | Network |
| 722 | Send LCP Echo Reply | PPPoE | Network |
| 723 | Receive LCP Echo Reply | PPPoE | Network |
| 727 | SonicPoint Provision | SonicPoint | Wireless |
| 728 | WLAN Disable By Schedule | Authentication Access | Users |
| 729 | WLAN Enabled By Schedule | Authentication Access | Users |
| 732 | WLAN SSL VPN Enforcement Check Drop | WLAN | Wireless |
| 733 | SSL VPN Enforcement | General | SSL VPN |
| 734 | Source Connection Status | Security Policy | Firewall |
| 735 | Destination Connection Status | Security Policy | Firewall |
| 737 | SMTP Authentication Failed | Log | |
| 738 | Session Duration | PPPoE | Network |
| 744 | RADIUS Communication Problem | Radius Authentication | Users |
| 745 | LDAP Authentication Failure | Radius Authentication | Users |
| 746 | LDAP Server Timeout | Radius Authentication | Users |
| 747 | LDAP Server Error | Radius Authentication | Users |
| 748 | LDAP Communication Problem | Radius Authentication | Users |
| 749 | LDAP Server Invalid Credential | Radius Authentication | Users |
| 750 | LDAP Server Insufficient Access | Radius Authentication | Users |
| 751 | LDAP Schema Mismatch | Radius Authentication | Users |
| 753 | LDAP Server Name Resolution Failed | Radius Authentication | Users |
| 754 | RADIUS Server Name Resolution Failed | Radius Authentication | Users |
| 755 | LDAP Server Certificate Invalid | Radius Authentication | Users |
| 756 | LDAP TLS or Local Error | Radius Authentication | Users |
| 757 | LDAP Directory Mismatch | Radius Authentication | Users |
| 759 | User Already Logged-In | Authentication Access | Users |
| 766 | Synchronize License Failed | General | Security Services |
| 773 | DDNS Abuse | Dynamic DNS | Network |
| 774 | DDNS Invalid | Dynamic DNS | Network |
| 776 | DDNS Update Success | Dynamic DNS | Network |
| 777 | DDNS Warning | Dynamic DNS | Network |
| 778 | DDNS Taken Offline | Dynamic DNS | Network |
| 779 | DDNS Added | Dynamic DNS | Network |
| 780 | DDNS Association Enable | Dynamic DNS | Network |
| 781 | DDNS Association Disable | Dynamic DNS | Network |
| 782 | DDNS Association On-line | Dynamic DNS | Network |
| 783 | Deleted All DDNS Association | Dynamic DNS | Network |
| 785 | Delete DDNS Association | Dynamic DNS | Network |
| 786 | DDNS Updating | Dynamic DNS | Network |
| 789 | IDP Detection Alert | IDP | Security Services |
| 790 | IDP Prevention Alert | IDP | Security Services |
| 791 | DPI-SSL | DPI-SSL | Security Services |
| 793 | Application Firewall Alert | Application Firewall | Firewall |
| 794 | Anti-Spyware Prevention Alert | Anti-Spyware | Security Services |
| 795 | Anti-Spyware Detection Alert | Anti-Spyware | Security Services |
| 796 | Anti-Spyware Service Expired | Anti-Spyware | Security Services |
| 797 | Outbound Connection Drop | RBL Filter | Security Services |
| 798 | Inbound Connection Drop | RBL Filter | Security Services |
| 799 | SMTP Server on RBL Blacklist | RBL Filter | Security Services |
| 800 | No Valid DNS Server on RBL | RBL Filter | Security Services |
| 805 | Interface Statistics Report | NSM | System |
| 809 | AV Gateway Alert | GAV | Security Services |
| 810 | AV Gateway Service Expire | GAV | Security Services |
| 815 | Too Many Gratuitous ARPs Detected | ARP | Network |
| 817 | Remote Dialup Received | Authentication Access | Users |
| 818 | Remote Dialup Authentication Request | Authentication Access | Users |
| 819 | Remote Dialup Authentication Password Error | Authentication Access | Users |
| 820 | Remote Dialup Authentication Password Valid | Authentication Access | Users |
| 821 | Remote Dialup Authentication Password Timeout | Authentication Access | Users |
| 822 | Remote Dialup Abort For Data | Authentication Access | Users |
| 824 | License Expire to Shutdown Secondary | General | High Availability |
| 825 | Secondary Active | State | High Availability |
| 826 | HA Error | State | High Availability |
| 829 | HA Alert | State | High Availability |
| 830 | HA Notice | State | High Availability |
| 832 | DHCP Scopes Altered | DHCP Server | Network |
| 833 | DHCP Lease File Corrupt | DHCP Server | Network |
| 834 | Failed to Write DHCP Leases to Storage | DHCP Server | Network |
| 835 | DHCP Leases Written to Storage | DHCP Server | Network |
| 840 | RIP Info | Advanced Routing | Network |
| 841 | RIP Notice | Advanced Routing | Network |
| 842 | RIP Debug | Advanced Routing | Network |
| 843 | OSPF Info | Advanced Routing | Network |
| 844 | OSPF Debug | Advanced Routing | Network |
| 845 | BGP Info | Advanced Routing | Network |
| 846 | BGP Debug | Advanced Routing | Network |
| 847 | IP Address Conflict | Interfaces | Network |
| 848 | OCSP Send Request | VPN PKI | VPN |
| 849 | OCSP Failed to Send Request | VPN PKI | VPN |
| 850 | OCSP Received Response | VPN PKI | VPN |
| 852 | OCSP Resolved Domain Name | VPN PKI | VPN |
| 853 | OCSP Failed to Resolve Domain Name | VPN PKI | VPN |
| 854 | OCSP Internal Error | VPN PKI | VPN |
| 856 | SYN Flood Watch Mode | Flood Protection | Firewall Settings |
| 857 | SYN Flood Trigger Mode | Flood Protection | Firewall Settings |
| 858 | SYN Flood Proxy Mode | Flood Protection | Firewall Settings |
| 859 | SYN Flood Proxy Trigger Mode | Flood Protection | Firewall Settings |
| 860 | SYN Flood Detected | Flood Protection | Firewall Settings |
| 861 | SYN Flood Proxy Mode Cancel | Flood Protection | Firewall Settings |
| 862 | SYN Flood Blacklist On | Flood Protection | Firewall Settings |
| 863 | SYN Flood Blacklist Off | Flood Protection | Firewall Settings |
| 864 | SYN-Flooding Machine Blacklisted | Flood Protection | Firewall Settings |
| 874 | CRL Expire | VPN PKI | VPN |
| 875 | Failed to Find Certificate | VPN PKI | VPN |
| 876 | CRL Missing | VPN PKI | VPN |
| 877 | CRL Validation Error | VPN PKI | VPN |
| 878 | Can't Validate Issuer Path | VPN PKI | VPN |
| 879 | WLAN Radio Frequency Threat Detected | RF Monitoring | Wireless |
| 881 | System Clock Manually Updated | Time | System |
| 898 | RST-Flooding Machine Blacklisted | Flood Protection | Firewall Settings |
| 899 | RST Flood Blacklist Continues | Flood Protection | Firewall Settings |
| 900 | Machine Removed From RST Flood Blacklist | Flood Protection | Firewall Settings |
| 901 | FIN-Flooding Machine Blacklisted | Flood Protection | Firewall Settings |
| 902 | FIN Flood Blacklist Continues | Flood Protection | Firewall Settings |
| 903 | Machine Removed From FIN Flood Blacklist | Flood Protection | Firewall Settings |
| 904 | Possible RST Flood | Flood Protection | Firewall Settings |
| 905 | Possible FIN Flood | Flood Protection | Firewall Settings |
| 906 | Possible RST Flood Ceased | Flood Protection | Firewall Settings |
| 907 | Possible FIN Flood Ceased | Flood Protection | Firewall Settings |
| 908 | Possible RST Flood Continues | Flood Protection | Firewall Settings |
| 909 | Possible FIN Flood Continues | Flood Protection | Firewall Settings |
| 913 | Responder: Authentication Method Mismatch | VPN IKE | VPN |
| 914 | Responder: Encryption Algorithm Mismatch | VPN IKE | VPN |
| 915 | Responder: Key Length Mismatch | VPN IKE | VPN |
| 916 | Responder: Hash Algorithm Mismatch | VPN IKE | VPN |
| 917 | Responder: Policy Has no User Name | VPN IKE | VPN |
| 918 | Responder: Policy Has no Password | VPN IKE | VPN |
| 919 | Responder: DH Group Mismatch | VPN IKE | VPN |
| 920 | Responder: AH Authentication Algorithm Mismatch | VPN IKE | VPN |
| 921 | Responder: ESP Encryption Algorithm Mismatch | VPN IKE | VPN |
| 922 | Responder: ESP Authentication Algorithm Mismatch | VPN IKE | VPN |
| 923 | Responder: AH Authentication Key Length Mismatch | VPN IKE | VPN |
| 924 | Responder: ESP Encryption Key Length Mismatch | VPN IKE | VPN |
| 925 | Responder: ESP Authentication Key Length Mismatch | VPN IKE | VPN |
| 926 | Responder: AH Authentication Key Rounds Mismatch | VPN IKE | VPN |
| 927 | Responder: ESP Encryption Key Rounds Mismatch | VPN IKE | VPN |
| 928 | Responder: ESP Authentication Key Rounds Mismatch | VPN IKE | VPN |
| 930 | Initiator: Peer Timeout - Retransmitting | VPN IKE | VPN |
| 931 | Responder: Peer Timeout - Retransmitting | VPN IKE | VPN |
| 932 | Responder: IPsec Protocol Mismatch | VPN IKE | VPN |
| 933 | Initiator: Proposed IKE ID Mismatch | VPN IKE | VPN |
| 934 | Responder: Local Network Mismatch Peer's Destination Network | VPN IKE | VPN |
| 935 | Responder: Destination Network Mismatch Peer's Local Network | VPN IKE | VPN |
| 936 | Responder: Route Table Overrides VPN Policy | VPN IKE | VPN |
| 937 | Initiator: IKE Proposal Mismatch | VPN IKE | VPN |
| 938 | Initiator: Send IKE_SA_INIT Request | VPN IKEv2 | VPN |
| 939 | Responder: Received IKE_SA_INIT Request | VPN IKEv2 | VPN |
| 940 | Initiator: Send IKE_AUTH Request | VPN IKEv2 | VPN |
| 941 | Responder: Received IKE_AUTH Request | VPN IKEv2 | VPN |
| 942 | Authentication Successful | VPN IKEv2 | VPN |
| 943 | Accept IKE SA Proposal | VPN IKEv2 | VPN |
| 944 | Accept IPsec SA Proposal | VPN IKEv2 | VPN |
| 945 | Initiator: Send CREATE_CHILD_SA Request | VPN IKEv2 | VPN |
| 946 | Responder: Received CREATE_CHILD_SA Request | VPN IKEv2 | VPN |
| 947 | Send Delete IKE SA Request | VPN IKEv2 | VPN |
| 948 | Received Delete IKE SA Request | VPN IKEv2 | VPN |
| 949 | Send Delete IPsec SA Request | VPN IKEv2 | VPN |
| 950 | Received Delete IPsec SA Request | VPN IKEv2 | VPN |
| 951 | Responder: Destination Network Mismatch Peer's Local Network | VPN IKEv2 | VPN |
| 952 | Responder: Peer Local Network Mismatch Peer's Destination Network | VPN IKEv2 | VPN |
| 953 | Payload Processing Error | VPN IKEv2 | VPN |
| 954 | Initiator: Extra Payloads Present | VPN IKEv2 | VPN |
| 955 | Initiator: Missing Required Payloads | VPN IKEv2 | VPN |
| 956 | Initiator: Invalid Input State | VPN IKEv2 | VPN |
| 957 | Initiator: Invalid Output State | VPN IKEv2 | VPN |
| 958 | Payload Validation Failed | VPN IKEv2 | VPN |
| 959 | Unable to Find IKE SA | VPN IKEv2 | VPN |
| 960 | Decrypt Packet Failed | VPN IKEv2 | VPN |
| 961 | Out of Memory | VPN IKEv2 | VPN |
| 962 | Responder: Policy for Remote IKE ID Not Found | VPN IKEv2 | VPN |
| 963 | Process Message Queue Failed | VPN IKEv2 | VPN |
| 964 | Invalid State | VPN IKEv2 | VPN |
| 965 | IKE Responder: No VPN Access Networks Assigned | VPN IKE | VPN |
| 966 | Invalid SPI Size | VPN IKEv2 | VPN |
| 967 | VPN Policy Not Found | VPN IKEv2 | VPN |
| 968 | IPsec Proposal Mismatch | VPN IKEv2 | VPN |
| 969 | IPsec Attribute Not Found | VPN IKEv2 | VPN |
| 970 | IKE Attribute Not Found | VPN IKEv2 | VPN |
| 971 | Peer Not Responding | VPN IKEv2 | VPN |
| 972 | Initiator: Retransmit IKEv2 Request Due to Remote Party Timeout | VPN IKEv2 | VPN |
| 973 | Initiator: Received IKE_SA_INT Response | VPN IKEv2 | VPN |
| 974 | Initiator: Received IKE_AUTH Response | VPN IKEv2 | VPN |
| 975 | Initiator: Received CREATE_CHILD_SA Response | VPN IKEv2 | VPN |
| 976 | Responder: Send IKE_SA_INIT Response | VPN IKEv2 | VPN |
| 977 | Responder: Send IKE_AUTH response | VPN IKEv2 | VPN |
| 978 | Negotiation Completed | VPN IKEv2 | VPN |
| 979 | Failed to Transmit Packet | VPN IKEv2 | VPN |
| 980 | Initiator: Proposed IKE ID Mismatch | VPN IKEv2 | VPN |
| 981 | IKE Proposal Mismatch | VPN IKEv2 | VPN |
| 982 | Received Notify Status Payload | VPN IKEv2 | VPN |
| 983 | Received Notify Error Payload | VPN IKEv2 | VPN |
| 984 | No NAT Device Detected | VPN IKEv2 | VPN |
| 985 | NAT Device Detected Between Negotiating Peers | VPN IKEv2 | VPN |
| 986 | Not Allowed by Policy Rule | Authentication Access | Users |
| 987 | Not Found Locally | Authentication Access | Users |
| 988 | Timeout | SSO Agent Authentication | Users |
| 989 | Configuration Error | SSO Agent Authentication | Users |
| 990 | Communication Problem | SSO Agent Authentication | Users |
| 991 | Name Resolution Failed | SSO Agent Authentication | Users |
| 992 | User Name Too Long | SSO Agent Authentication | Users |
| 993 | Domain Name Too Long | SSO Agent Authentication | Users |
| 994 | Configuration Mode Administration Session Started | Authentication Access | Users |
| 995 | Configuration Mode Administration Session Ended | Authentication Access | Users |
| 996 | Read-only Mode GUI Administration Session Started | Authentication Access | Users |
| 997 | Non-Config Mode GUI Administration Session Started | Authentication Access | Users |
| 998 | GUI Administration Session End | Authentication Access | Users |
| 1008 | Logout Detected by SSO | Authentication Access | Users |
| 1010 | Using LDAP Without TLS | Radius Authentication | Users |
| 1012 | Responder: Send CREATE_CHILD_SA Response | VPN IKEv2 | VPN |
| 1013 | Send Delete IKE SA Response | VPN IKEv2 | VPN |
| 1014 | Send Delete IPsec SA Response | VPN IKEv2 | VPN |
| 1015 | Received Delete IKE SA Response | VPN IKEv2 | VPN |
| 1016 | Received Delete IPsec SA Response | VPN IKEv2 | VPN |
| 1017 | WWAN Device Detected | General | WWAN Modem |
| 1018 | PPP Message | PPP | Network |
| 1026 | Data Usage Watermark Reached | General | WWAN Modem |
| 1027 | Data Usage Limit Reached | General | WWAN Modem |
| 1029 | Non-Permitted Option TCP Packet | TCP | Network |
| 1030 | Invalid TCP Window Scale Option Length | TCP | Network |
| 1031 | Invalid TCP Window Scale Option Value | TCP | Network |
| 1033 | Group Membership Retrieval Failed | Authentication Access | Users |
| 1035 | Password Expire | Authentication Access | Users |
| 1036 | Responder: IKE Phase 1 Exchange Mismatch | VPN IKE | VPN |
| 1040 | DHCP Server IP Conflict Detected | DHCP Server | Network |
| 1041 | DHCP Server Received DHCP Decline | DHCP Server | Network |
| 1043 | Power Supply Without Redundancy | Hardware | System |
| 1046 | Diagnostic Auto-Restart Canceled | Restart | System |
| 1047 | Diagnostic Auto-Restart | Restart | System |
| 1048 | Password doesn't meet constraints | Authentication Access | Users |
| 1049 | System Setting Imported | Settings | System |
| 1050 | VPN Policy Added | VPN IPsec | VPN |
| 1051 | VPN Policy Deleted | VPN IPsec | VPN |
| 1052 | VPN Policy Modified | VPN IPsec | VPN |
| 1055 | WWAN: No SIM Detected | General | WWAN Modem |
| 1058 | Primary Firewall Reboot from Active to Standby | State | High Availability |
| 1059 | Secondary Firewall Reboot from Active to Standby | State | High Availability |
| 1065 | Remote Backup Succeeded | Settings | System |
| 1066 | Remote Backup Failed | Settings | System |
| 1068 | Multiple DHCP Servers Detected | DHCP Server | Network |
| 1070 | Invalid DNS Server | DNS | Network |
| 1071 | DHCP Server Sanity Check Pass | DHCP Server | Network |
| 1072 | DHCP Server Sanity Check Failed | DHCP Server | Network |
| 1073 | Agent Error | SSO Agent Authentication | Users |
| 1075 | Agent Down | SSO Agent Authentication | Users |
| 1076 | Agent Up | SSO Agent Authentication | Users |
| 1077 | SonicPoint/SonicWave Status | SonicPoint/SonicWave | Wireless |
| 1078 | SonicPoint/SonicWave Provision | SonicPoint/SonicWave | Wireless |
| 1079 | SSL VPN | General | SSL VPN |
| 1080 | Successful SSL VPN User Login | Authentication Access | Users |
| 1082 | Entity Operational | Probe | Anti-Spam |
| 1083 | Entity Unreachable | Probe | Anti-Spam |
| 1084 | Service Enable | General | Anti-Spam |
| 1085 | Service Disable | General | Anti-Spam |
| 1086 | Service Subscription Expire | General | Anti-Spam |
| 1087 | SMTP Connection Expire | Anti-Spam | |
| 1088 | Startup Failure | General | Anti-Spam |
| 1089 | Teardown Failure | General | Anti-Spam |
| 1090 | DHCP Message From Untrusted Relay Agent | DHCP Server | Network |
| 1093 | SMTP Server Found on Reject List | GRID | Anti-Spam |
| 1094 | No Valid DNS Server | GRID | Anti-Spam |
| 1095 | Unprocessed E-mail From MTA | Anti-Spam | |
| 1097 | SCEP Client | VPN PKI | VPN |
| 1098 | DNS Rebind Attack Detected | DNS | Network |
| 1099 | DNS Rebind Attack Blocked | DNS | Network |
| 1100 | Policy Status is Up | Network Monitor | Network |
| 1101 | Policy Status is Down | Network Monitor | Network |
| 1102 | Policy Status is Unknown | Network Monitor | Network |
| 1103 | Host Status is Unknown | Network Monitor | Network |
| 1104 | Policy Added | Network Monitor | Network |
| 1105 | Policy Deleted | Network Monitor | Network |
| 1106 | Policy Modified | Network Monitor | Network |
| 1107 | System Alert | Status | System |
| 1108 | E-mail Message Blocked | Anti-Spam | |
| 1109 | CSR Generation | VPN PKI | VPN |
| 1110 | Assigned IP Address | DHCP Server | Network |
| 1111 | Released IP Address | DHCP Server | Network |
| 1117 | SSO Probe Failed | Authentication Access | Users |
| 1118 | SMTP Server Not Configured | Authentication Access | Users |
| 1119 | RADIUS User Cannot Use One Time Password | Authentication Access | Users |
| 1120 | TSA Timeout | Authentication Access | Users |
| 1121 | TSA Name Resolution Failed | Authentication Access | Users |
| 1122 | No Name Received from TSA | Authentication Access | Users |
| 1123 | TSA Communication Problem | Authentication Access | Users |
| 1124 | TSA User logout | Authentication Access | Users |
| 1127 | IPsec Tunnel Mode Mismatch | VPN IKE | VPN |
| 1128 | IPsec Transport Mode Mismatch | VPN IKE | VPN |
| 1131 | Anti-Spam Probe Response Success | Probe | Anti-Spam |
| 1132 | Anti-Spam Probe Response Failure | Probe | Anti-Spam |
| 1133 | PPPoE Overview | PPPoE | Network |
| 1138 | Anti-Spam Unauth GRID Response | GRID | Anti-Spam |
| 1139 | Anti-Spam Invalid Key in GRID Response | GRID | Anti-Spam |
| 1140 | Anti-Spam Invalid Key Version in GRID Response | GRID | Anti-Spam |
| 1141 | Anti-Spam Host Not GRID List | GRID | Anti-Spam |
| 1142 | Anti-Spam No Response From DNS Server | General | Anti-Spam |
| 1143 | Anti-Spam Not Blacklisted | GRID | Anti-Spam |
| 1144 | Anti-Spam Default Not Blacklisted | GRID | Anti-Spam |
| 1145 | Anti-Spam Insert Entry Failed | GRID | Anti-Spam |
| 1146 | Anti-Spam Resolved Cloud Address | General | Anti-Spam |
| 1147 | Anti-Spam Cloud Address Updated | General | Anti-Spam |
| 1150 | Terminal Services Agent is Down | SSO Agent Authentication | Users |
| 1151 | Terminal Services Agent is Up | SSO Agent Authentication | Users |
| 1156 | Syslog/NSM Name Resolution Failure | DNS | Network |
| 1157 | User Account Expired | Authentication Access | Users |
| 1158 | User Account Pruned | Authentication Access | Users |
| 1159 | Visualization Control Expire Message | General | Security Services |
| 1160 | Failed to Ping Remote Backup Server | Settings | System |
| 1161 | Failed to Upload Remote Backup Server | Settings | System |
| 1169 | WXA Appliance Found | Local WXA Appliance | WAN Acceleration |
| 1170 | WXA Appliance Operational | Local WXA Appliance | WAN Acceleration |
| 1171 | WXA Appliance Not Operational | Local WXA Appliance | WAN Acceleration |
| 1172 | WXA Appliance Used | Local WXA Appliance | WAN Acceleration |
| 1173 | WXA Appliance Not Used | Local WXA Appliance | WAN Acceleration |
| 1174 | WXA Appliance Not Responding | Remote WXA Appliance | WAN Acceleration |
| 1175 | WXA Appliance Responding | Remote WXA Appliance | WAN Acceleration |
| 1176 | WAN Acceleration Software License Expired | Local WXA Appliance | WAN Acceleration |
| 1177 | Malformed DNS Packet | DNS | Network |
| 1178 | High SSO Packet Count | SSO Agent Authentication | Users |
| 1179 | High SSO User Connection | SSO Agent Authentication | Users |
| 1183 | Deleting IPsec SA | VPN IKE | VPN |
| 1184 | Invalid Scope Deleted | DHCP Server | Network |
| 1189 | Network Mismatched | VPN IKE | VPN |
| 1190 | LDAP Mirror Added | Radius Authentication | Users |
| 1191 | LDAP Mirror Deleted | Radius Authentication | Users |
| 1192 | LDAP Mirror Added Member | Radius Authentication | Users |
| 1193 | LDAP Mirror Deleted Member | Radius Authentication | Users |
| 1194 | HA Monitor Probe Interface Mismatched | Monitoring | High Availability |
| 1195 | Botnet Filter Subscription Expired | Botnet Filter | Security Services |
| 1196 | Firewall Limit Reached | Status | System |
| 1198 | Geo IP Initiator Blocked | Geo-IP Filter | Security Services |
| 1199 | Geo IP Responder Blocked | Geo-IP Filter | Security Services |
| 1200 | Botnet Initiator Blocked | Botnet Filter | Security Services |
| 1201 | Botnet Responder Blocked | Botnet Filter | Security Services |
| 1202 | User Log Audit Trail | Authentication Access | Users |
| 1203 | User Log Audit Trail Warning | Authentication Access | Users |
| 1204 | User Log Audit Trail Error | Authentication Access | Users |
| 1205 | HA Peer MultiInterface Link Up | State | High Availability |
| 1206 | HA Peer MultiInterface Link Down | State | High Availability |
| 1207 | HA Peer Link Status Bad for Failover | State | High Availability |
| 1208 | HA Peer Link Status Good for Failover | State | High Availability |
| 1209 | MAC-IP Anti-Spoof Check Enforced For Hosts | MAC-IP Anti-Spoof | Network |
| 1210 | MAC-IP Anti-Spoof Cache Not Found For Router | MAC-IP Anti-Spoof | Network |
| 1211 | MAC-IP Anti-Spoof Cache Not Router | MAC-IP Anti-Spoof | Network |
| 1212 | MAC-IP Anti-Spoof Cache Blacklisted Device | MAC-IP Anti-Spoof | Network |
| 1213 | UDP Flood Detected | Flood Protection | Firewall Settings |
| 1214 | ICMP Flood Detected | Flood Protection | Firewall Settings |
| 1216 | IP Pool of VPN Policy is Full | VPN IKE | VPN |
| 1217 | IP Pool of VPN Policy Not Configured | VPN IKE | VPN |
| 1218 | Mobile IKE Update Peer Gateway IP | VPN IKE | VPN |
| 1219 | IP Address Allocated For Client | VPN IKE | VPN |
| 1220 | Invalid SNMPv3 Packet | SNMP | System |
| 1221 | Invalid SNMPv3 Engine ID | SNMP | System |
| 1222 | Invalid SNMPv3 User | SNMP | System |
| 1223 | Invalid SNMPv3 Time Window | SNMP | System |
| 1226 | HTTPS Handshake | Network Access | Network |
| 1227 | Guest Traffic Quota Exceeded | Authentication Access | Users |
| 1236 | RBL Received Blacklist Directive | RBL Filter | Security Services |
| 1237 | RBL Not Blacklisted by Domain | RBL Filter | Security Services |
| 1238 | RBL No Response to Domain | RBL Filter | Security Services |
| 1239 | RBL DNS Response With Error Reply Code | RBL Filter | Security Services |
| 1240 | Endpoint Anomaly Detected | Anomaly | VoIP |
| 1241 | Endpoint Anomaly Lockout Started | Anomaly | VoIP |
| 1242 | Endpoint Anomaly Lockout Ended | Anomaly | VoIP |
| 1243 | Sending OTP Failed | Authentication Access | Users |
| 1244 | LDAP Mirror User Group Add Failure | Radius Authentication | Users |
| 1245 | LDAP Mirror User Group Member Add Failure | Radius Authentication | Users |
| 1246 | LDAP User Group Nesting Not Being Mirrored | Radius Authentication | Users |
| 1252 | IPv6 IPsec Tunnel Mode Mismatch | VPN IKE | VPN |
| 1253 | IPv6 Tunnel Dropped | IPv6 Tunneling | Network |
| 1259 | DHCPv6 Lease File Corrupt | DHCPv6 Server | Network |
| 1260 | Failed To Write DHCPv6 Leases to Storage | DHCPv6 Server | Network |
| 1261 | DHCPv6 Leases Written to Storage | DHCPv6 Server | Network |
| 1263 | AppFlow Server | AppFlow | System |
| 1264 | WXA Configuration | Remote WXA Appliance | WAN Acceleration |
| 1265 | SonicPoint Association Post Request Failed | SonicPoint | Wireless |
| 1266 | SonicPoint Association Post Request Success | SonicPoint | Wireless |
| 1268 | Firmware Update Failed | Settings | System |
| 1269 | Firmware Update Succeeded | Settings | System |
| 1299 | Self Test Passed | Crypto Test | Security Services |
| 1300 | Self Test Failed | Crypto Test | Security Services |
| 1305 | IKE Responder: No VPN Policy found for IKE ID | VPN IKE | VPN |
| 1306 | IKE Responder: No VPN Policy found for Gateway | VPN IKE | VPN |
| 1307 | IKE Initiator: No VPN Policy found for IKE ID | VPN IKE | VPN |
| 1308 | IKE Initiator: No VPN Policy found for Gateway | VPN IKE | VPN |
| 1309 | HA Association Posted Failed | General | High Availability |
| 1310 | HA Association Posted Success | General | High Availability |
| 1311 | DHCP Resources of this Pool Ran Out | DHCP Server | Network |
| 1312 | IP Version of Traffic Selector Mismatch | VPN IKEv2 | VPN |
| 1313 | NAT Policy Add | NAT Policy | Network |
| 1314 | NAT Policy Modify | NAT Policy | Network |
| 1315 | NAT Policy Delete | NAT Policy | Network |
| 1316 | ARP Attack Detected | ARP | Network |
| 1324 | Received Dead Peer Detection Request | VPN IKEv2 | VPN |
| 1325 | Received Dead Peer Detection Response | VPN IKEv2 | VPN |
| 1326 | Send Dead Peer Detection Request | VPN IKEv2 | VPN |
| 1327 | Send Dead Peer Detection Response | VPN IKEv2 | VPN |
| 1328 | Send Invalid SPI Request | VPN IKEv2 | VPN |
| 1329 | Received Invalid SPI Request | VPN IKEv2 | VPN |
| 1330 | Send Invalid SPI Response | VPN IKEv2 | VPN |
| 1331 | Received Invalid SPI Response | VPN IKEv2 | VPN |
| 1332 | NDPP Mode Change | Status | System |
| 1333 | Create a User | Authentication Access | Users |
| 1334 | Edit a User | Authentication Access | Users |
| 1335 | Delete a User | Authentication Access | Users |
| 1336 | Change Certification | Settings | System |
| 1337 | User Password Changed by Administrators | Settings | System |
| 1338 | User Change Password | Settings | System |
| 1339 | Change Password Rule | Settings | System |
| 1340 | Change User Inactive time out | Settings | System |
| 1341 | Edit Customize Login Pages | Authentication Access | Users |
| 1342 | Edit user lockout params | Authentication Access | Users |
| 1343 | VPN Policy Enabled/Disabled | VPN IPsec | VPN |
| 1344 | Interface Configure | Interfaces | Network |
| 1345 | SHA384 Test Success | Crypto Test | Security Services |
| 1346 | SHA384 Test Failed | Crypto Test | Security Services |
| 1347 | SHA512 Test Success | Crypto Test | Security Services |
| 1348 | SHA512 Test Failed | Crypto Test | Security Services |
| 1349 | Ikev1 Test Success | Crypto Test | Security Services |
| 1350 | Ikev1 Test Failed | Crypto Test | Security Services |
| 1351 | Ikev2 Test Success | Crypto Test | Security Services |
| 1352 | Ikev2 Test Failed | Crypto Test | Security Services |
| 1353 | SSH Test Success | Crypto Test | Security Services |
| 1354 | SSH Test Failed | Crypto Test | Security Services |
| 1355 | SNMP Test Success | Crypto Test | Security Services |
| 1356 | SNMP Test Failed | Crypto Test | Security Services |
| 1357 | TLS 1.0/1.1/1.2 Test Success | Crypto Test | Security Services |
| 1358 | TLS 1.0/1.1/1.2 Test Failed | Crypto Test | Security Services |
| 1359 | HMAC-SHA384 Test Success | Crypto Test | Security Services |
| 1360 | HMAC-SHA384 Test Failed | Crypto Test | Security Services |
| 1361 | HMAC-SHA512 Test Success | Crypto Test | Security Services |
| 1362 | HMAC-SHA512 Test Failed | Crypto Test | Security Services |
| 1363 | WLAN 802.11 Flood | WLAN | Wireless |
| 1364 | Cert Payload processing failed | VPN PKI | VPN |
| 1365 | DPI-SSL Memory Check | DPI-SSL | Security Services |
| 1366 | TCP-Flooding Machine Blacklisted | Flood Protection | Firewall Settings |
| 1367 | TCP Flood Blacklist Continues | Flood Protection | Firewall Settings |
| 1368 | Machine Removed From TCP Flood Blacklist | Flood Protection | Firewall Settings |
| 1369 | Possible TCP Flood | Flood Protection | Firewall Settings |
| 1370 | Possible TCP Flood Ceased | Flood Protection | Firewall Settings |
| 1371 | Possible TCP Flood Continues | Flood Protection | Firewall Settings |
| 1372 | LDAP Mirroring Overflow | Radius Authentication | Users |
| 1373 | IPv6 fragment size is less than minimum (<1280) | Attacks | Security Services |
| 1374 | IP Reassembly : Incomplete IGMP fragment | Attacks | Security Services |
| 1375 | UDP fragmented datagram is too big (>65535) | Attacks | Security Services |
| 1376 | Nestea/Teardrop Attack | Attacks | Security Services |
| 1377 | SHLO verification failed | General | Anti-Spam |
| 1378 | SHLO replay attack | General | Anti-Spam |
| 1379 | WXA association request failed | Local WXA Appliance | WAN Acceleration |
| 1380 | WXA association succeeded | Local WXA Appliance | WAN Acceleration |
| 1381 | Application Control Expiration Message | General | Security Services |
| 1382 | Configuration Change Succeeded | Configuration Auditing | Log |
| 1383 | Configuration Change Failed | Configuration Auditing | Log |
| 1387 | TCP Null Flag Attack | Attacks | Security Services |
| 1389 | Client CF Access Without Agent | Client CF | Security Services |
| 1390 | Client CF Agent Out of Date | Client CF | Security Services |
| 1392 | SonicOS up | Restart | System |
| 1393 | SonicOS down | Restart | System |
| 1394 | Startup Failure | Local WXA Appliance | WAN Acceleration |
| 1395 | Get Failure | Local WXA Appliance | WAN Acceleration |
| 1396 | Parse Failure | Local WXA Appliance | WAN Acceleration |
| 1397 | Register Failure | Local WXA Appliance | WAN Acceleration |
| 1398 | Unregister Failure | Local WXA Appliance | WAN Acceleration |
| 1399 | Probe Failure | Local WXA Appliance | WAN Acceleration |
| 1400 | Create Failure | Local WXA Appliance | WAN Acceleration |
| 1401 | Set Failure | Local WXA Appliance | WAN Acceleration |
| 1402 | Delete Failure | Local WXA Appliance | WAN Acceleration |
| 1403 | Enable Service | Local WXA Appliance | WAN Acceleration |
| 1404 | Disable Service | Local WXA Appliance | WAN Acceleration |
| 1405 | Request Failure | Local WXA Appliance | WAN Acceleration |
| 1406 | General DHCPv6 Client Info | DHCPv6 Client | Network |
| 1407 | DHCPv6 Client Send Message | DHCPv6 Client | Network |
| 1408 | DHCPv6 Client Get Message | DHCPv6 Client | Network |
| 1409 | DHCPv6 Client DAD | DHCPv6 Client | Network |
| 1410 | DHCPv6 Client Timeout | DHCPv6 Client | Network |
| 1411 | DHCPv6 Client Get RA Flags | DHCPv6 Client | Network |
| 1412 | DHCPv6 Client Get New Lease | DHCPv6 Client | Network |
| 1413 | DHCPv6 Client Release Lease | DHCPv6 Client | Network |
| 1414 | DHCPv6 Server Assign Lease | DHCPv6 Server | Network |
| 1415 | DHCPv6 Server Release Lease | DHCPv6 Server | Network |
| 1416 | DHCPv6 Server Receive Decline | DHCPv6 Server | Network |
| 1417 | DHCPv6 Server Resources of this Pool Ran Out | DHCPv6 Server | Network |
| 1418 | Add DHCPv6 Server Scope | DHCPv6 Server | Network |
| 1419 | Delete DHCPv6 Server Scope | DHCPv6 Server | Network |
| 1420 | DHCPv6 Server Get Message | DHCPv6 Server | Network |
| 1421 | DHCPv6 Server Send Message | DHCPv6 Server | Network |
| 1422 | IPv6 Address Conflict | Interfaces | Network |
| 1423 | Exceed Max NDP Size | Interfaces | Network |
| 1424 | DPI-SSL Connection Check | DPI-SSL | Security Services |
| 1426 | SonicPoint/SonicWave Unexpected Reboot | SonicPoint/SonicWave | Wireless |
| 1434 | Group-port Link Up | Interfaces | Network |
| 1435 | Group-port Link Down | Interfaces | Network |
| 1438 | CA Cert Added | VPN PKI | VPN |
| 1439 | Local Cert Added | VPN PKI | VPN |
| 1440 | CA Cert Deleted | VPN PKI | VPN |
| 1441 | Local Cert Deleted | VPN PKI | VPN |
| 1442 | USB Over Current | Hardware | System |
| 1443 | Control Plane Flood Protection Threshold Exceeded | Flood Protection | Firewall Settings |
| 1444 | HA Reboot | State | High Availability |
| 1445 | Connection Exceed | Local WXA Appliance | WAN Acceleration |
| 1446 | Mask 31-Bit Scope Deleted | DHCP Server | Network |
| 1453 | Extended Switch Add | Switch Network | Network |
| 1454 | Extended Switch Remove | Switch Network | Network |
| 1455 | Extended Switch Port Speed Change | Switch Network | Network |
| 1456 | Extended Switch Port Duplex Mode Change | Switch Network | Network |
| 1457 | Extended Switch Port Link Status Change | Switch Network | Network |
| 1459 | Capture ATP File Transfer Attempt | GAV | Security Services |
| 1460 | Capture ATP File Transfer Result | GAV | Security Services |
| 1461 | CFS Notice | Content Filter | Security Services |
| 1462 | AV Gateway Inform | GAV | Security Services |
| 1474 | Custom Geo IP Initiator Blocked | Geo-IP Filter | Security Services |
| 1475 | Custom Geo IP Responder Blocked | Geo-IP Filter | Security Services |
| 1476 | Custom Botnet Initiator Blocked | Botnet Filter | Security Services |
| 1477 | Custom Botnet Responder Blocked | Botnet Filter | Security Services |
| 1511 | Automatic Cloud Backup Successful | Cloud Backup | System |
| 1512 | Automatic Cloud Backup Failed | Cloud Backup | System |
| 1513 | Manual Cloud Backup Successful | Cloud Backup | System |
| 1514 | Manual Cloud Backup Failed | Cloud Backup | System |
| 1515 | Delete Cloud Backup Successful | Cloud Backup | System |
| 1516 | Delete Cloud Backup Failed | Cloud Backup | System |
| 1518 | Botnet Initiator Blocked By Dynamic List | Botnet Filter | Security Services |
| 1519 | Botnet Responder Blocked By Dynamic List | Botnet Filter | Security Services |
| 1520 | E-mail SFR Success | Settings | System |
| 1521 | E-mail SFR Failed | Settings | System |
| 1522 | SonicPoint 3G/4G/LTE WWAN Status | SonicPoint/SonicWave | Wireless |
| 1524 | SonicWave POE warning | SonicPoint/SonicWave | Wireless |
| 1525 | SonicWave License Expired | SonicPoint/SonicWave | Wireless |
| 1526 | SonicWave License Invalid | SonicPoint/SonicWave | Wireless |
| 1529 | AWS Log export Failed | AWS | Log |
| 1530 | AWS Log export Success | AWS | Log |
| 1531 | AWS AddressObject synchronization | AWS | Log |
| 1532 | DPI-SSH PF User | DPI-SSH | Security Services |
| 1533 | DPI-SSH | DPI-SSH | Security Services |
| 1534 | DPI-SSH Connection Check | DPI-SSH | Security Services |
| 1535 | Receive DNS Reply With Truncated Flag Set | DNS | Network |
| 1544 | Storage Module Association Posted Failed | Storage Module | System |
| 1545 | Storage Module Association Posted Success | Storage Module | System |
| 1552 | User Login Failed | Tacacs Authentication | Users |
| 1553 | User Login Timeout | Tacacs Authentication | Users |
| 1554 | User Login Error | Tacacs Authentication | Users |
| 1557 | TACACS+ User Cannot Use One Time Password | Authentication Access | Users |
| 1558 | Log DB Deleted | General | Log |
| 1559 | Next-Gen AV Access Without Agent | Next-Gen Anti-Virus | Security Services |
| 1560 | Next-Gen AV Agent Out of Date | Next-Gen Anti-Virus | Security Services |
| 1561 | Next-Gen AV Expire message | Next-Gen Anti-Virus | Security Services |
| 1562 | Next-Gen AV Expiration Warning | Next-Gen Anti-Virus | Security Services |
| 1563 | SSLE Access Without Agent | DPI-SSL Enforcement | Security Services |
| 1564 | SSLE Expire Message | DPI-SSL Enforcement | Security Services |
| 1565 | FTP Transfer Success | Settings | System |
| 1566 | FTP Transfer Failed | Settings | System |
| 1567 | E-mail Transfer Success | Settings | System |
| 1568 | E-mail Transfer Failed | Settings | System |
| 1570 | User Account Lockout | Authentication Access | Users |
| 1571 | User Account Unlocked | Authentication Access | Users |
| 1572 | User is currently locked out | Authentication Access | Users |
| 1573 | Drop All IPv6 Traffic | Advanced | Firewall Settings |
| 1575 | DPI-SSL Default Exclusions | DPI-SSL | Security Services |
| 1576 | Drop Record Route Packet | Advanced | Firewall Settings |
| 1577 | Dynamic External Address Group Added | Dynamic External Address Object | Object |
| 1578 | Dynamic External Address Group Deleted | Dynamic External Address Object | Object |
| 1579 | Dynamic External Address Group Edited | Dynamic External Address Object | Object |
| 1580 | Dynamic External Address Group Download New File Success | Dynamic External Address Object | Object |
| 1582 | Dynamic External Address Group Download Failed | Dynamic External Address Object | Object |
| 1583 | Dynamic External Address Group Flush OK | Dynamic External Address Object | Object |
| 1584 | Dynamic External Address Group Flush Failed | Dynamic External Address Object | Object |
| 1585 | User Login Denied | Authentication Access | Users |
| 1586 | Path Available | Path Selection Profiles | SD-WAN |
| 1587 | All Paths Removed | Path Selection Profiles | SD-WAN |
| 1588 | Path Added | Path Selection Profiles | SD-WAN |
| 1589 | Path Removed | Path Selection Profiles | SD-WAN |
| 1591 | NSM Info | Advanced Routing | Network |
| 1592 | NSM Debug | Advanced Routing | Network |
| 1595 | SonicWave BLE warning | SonicPoint/SonicWave | Wireless |
| 1596 | SonicWave BLE Info | SonicPoint/SonicWave | Wireless |
| 1597 | POE Overview | POE | Network |
| 1599 | CFS Policy Added | Content Filter | Security Services |
| 1600 | CFS Policy Modified | Content Filter | Security Services |
| 1601 | CFS Policy Deleted | Content Filter | Security Services |
| 1608 | Probe Added | Performance Probes | SD-WAN |
| 1609 | Probe Deleted | Performance Probes | SD-WAN |
| 1610 | Probe Modified | Performance Probes | SD-WAN |
| 1611 | Performance Class Object Added | Performance Class Objects | SD-WAN |
| 1612 | Performance Class Object Deleted | Performance Class Objects | SD-WAN |
| 1613 | Performance Class Object Modified | Performance Class Objects | SD-WAN |
| 1615 | PSP Added | Path Selection Profiles | SD-WAN |
| 1616 | PSP Modified | Path Selection Profiles | SD-WAN |
| 1617 | PSP Deleted | Path Selection Profiles | SD-WAN |
| 1618 | Route Added | SD-WAN Route | SD-WAN |
| 1619 | Route Modified | SD-WAN Route | SD-WAN |
| 1620 | Route Deleted | SD-WAN Route | SD-WAN |
| 1621 | SD-WAN Group Added | SD-WAN Groups | SD-WAN |
| 1622 | SD-WAN Group Modified | SD-WAN Groups | SD-WAN |
| 1623 | SD-WAN Group Deleted | SD-WAN Groups | SD-WAN |
| 1624 | SD-WAN Interface Added to Group | SD-WAN Groups | SD-WAN |
| 1625 | SD-WAN Interface Deleted from Group | SD-WAN Groups | SD-WAN |
| 1626 | SD-WAN Group Member Modified | SD-WAN Groups | SD-WAN |
| 1627 | User Account Expired due to inactivity | Authentication Access | Users |
| 1632 | Service Stopped | Instance Status | Multi-Instance |
| 1633 | Service Started | Instance Status | Multi-Instance |
| 1634 | Service Deleted | Instance Status | Multi-Instance |
| 1635 | Service Failed | Instance Status | Multi-Instance |
| 1638 | SonicWave RRM Info | SonicPoint/SonicWave | Wireless |
| 1639 | Cloud Platform API | Cloud Platform | System |
| 1643 | Service Added | Instance Status | Multi-Instance |
| 1644 | Service Edited | Instance Status | Multi-Instance |
| 1645 | Endpoint Security Access Without Agent | Endpoint Security | Security Services |
| 1646 | Endpoint Security Service Expire Message | Endpoint Security | Security Services |
| 1647 | Endpoint Security Expiration Warning | Endpoint Security | Security Services |
| 1649 | SonicWall Switch | Switch Network | Network |
| 1650 | Recommend NSM upgrade | Authentication Access | Users |
| 1651 | NSM encryption type unknown | Authentication Access | Users |
| 1652 | Recommend management platform upgrade | Authentication Access | Users |
| 1653 | Management platformencryption type unknown | Authentication Access | Users |
| 1654 | Custom Match Applied | Application Firewall | Firewall |
| 1655 | User is now locked out | Authentication Access | Users |
| 1658 | CFS Warning | Content Filter | Security Services |
| 1659 | CFS Info | Content Filter | Security Services |
| 1671 | Extended Switch Unreachable | Network Access | Network |
| 1672 | CLI Limit Admin Denied From WAN | Authentication Access | Users |
| 1674 | Chassis settings change | Configuration Auditing | Log |
| 1675 | PSU is Bad | Hardware | System |
| 1676 | PSU is Not Present | Hardware | System |
| 1677 | PSU is On and OK | Hardware | System |
| 1678 | HA Recover Stateful Data | General | High Availability |
| 1679 | Update Peer IP/Port | VPN IKEv2 | VPN |