Appendix B. Security Appliance Logging Messages
This appendix covers all the possible messages a firewall can generate. It can serve as a quick reference so that you can look up messages that are associated with the different severity levels.
Cisco firewall logging messages are listed in this section grouped according to their default severity level (1 to 7):
• 1—Alerts
• 2—Critical messages
• 3—Errors
• 4—Warnings
• 5—Notifications
• 6—Informational messages
• 7—Debugging messages
Severity level 0, Emergencies, exists but is never used by Cisco firewalls. Historically, these messages have been associated with UNIX systems and are sent only when a system is unstable and can no longer operate properly. That extreme condition is not applicable with a firewall platform.
All syslog messages have a default severity level, which is listed in the following tables. You can reassign each message to a new severity level if needed.
The logging messages listed here are based on FWSM, ASA, and PIX platforms.
You can use the information presented in this appendix when you want to choose a severity level for a logging destination. Make sure the level you choose will generate the messages you need to see.
Note
When you choose a severity level, remember that logging messages from that level and all lower-numbered levels are sent. Only the messages from a higher-numbered level are not sent.
Figure B-1 shows each of the logging severity levels, along with a general list of the types of messages generated. Notice that each level also includes every level below it. The higher the severity level, the more types of messages that are included.
Figure B-1 Syslog Severity Levels and Their Messages
Note
In the tables in this appendix, the six-digit logging messages are listed in numerical order. When a firewall generates a logging message, it adds a prefix that usually indicates its hardware platform. For example, %PIX denotes the PIX Security Appliance platform, %FWSM denotes the Firewall Service Module (FWSM), and %ASA denotes the Adaptive Security Appliance (ASA).
For the purpose of this book, where all firewall platforms are covered, the messages are simply shown with a %ASA prefix.
B-1 Alerts—Syslog Severity Level 1 Messages
Table B-1 lists all the severity level 1 logging messages, along with their message numbers and text. All the messages supported by FWSM, ASA, and PIX are shown.
Table B-1 Severity 1 (Alerts) Logging Messages
B-2 Critical—Syslog Severity Level 2 Messages
Table B-2 lists all the severity level 2 logging messages, along with their message numbers and text. All the messages supported by FWSM, ASA, and PIX are shown.
Table B-2 Severity 2 (Critical) Logging Messages
B-3 Errors—Syslog Severity Level 3 Messages
Table B-3 lists all the severity level 3 logging messages, along with their message numbers and text. All the messages supported by FWSM, ASA, and PIX are shown.
Table B-3 Severity 3 (Errors) Logging Messages
B-4 Warnings—Syslog Severity Level 4 Messages
Table B-4 lists all the severity level 4 logging messages, along with their message numbers and text. All the messages supported by FWSM, ASA, and PIX are shown.
Table B-4 Severity 4 (Warnings) Logging Messages
B-5 Notifications—Syslog Severity Level 5 Messages
Table B-5 lists all the severity level 5 logging messages, along with their message numbers and text. All the messages supported by FWSM, ASA, and PIX are shown.
Table B-5 Severity 5 (Notifications) Logging Messages
B-6 Informational—Syslog Severity Level 6 Messages
Table B-6 lists all the severity level 6 logging messages, along with their message numbers and text. All the messages supported by FWSM, ASA, and PIX are shown.
Table B-6 Severity 6 (Informational) Logging Messages
B-7 Debugging—Syslog Severity Level 7 Messages
Table B-7 lists all the severity level 7 logging messages, along with their message numbers and text. All the messages supported by FWSM, ASA, and PIX are shown.
Table B-7 Severity 7 (Debugging) Logging Messages
