Admin Logs. Sophos XG Firewall

Sophos XG Firewall | Appendix A - Logs | 542

Data Fields

user user_group client_used auth_mechanism reason src_ip src_mac bytes_sent bytes_received message name event_timestamp

Type

string string string string string string string integer integer string string integer

Description

User name

Group name to which the user belongs.

Authentication client used

Mechanism used for authentication

Reason to provide authentication

Original Source IP address of traffic

Original Source MAC address of traffic

Total number of bytes sent

Total number of bytes received

Message displayed

Name of the user timestamp

Admin Logs

Message ID

17501

17502

17503

17504

17505

17506

17507

17504

17970

17971

17504

Module-specific Fields

Data Fields

status user src_ip message

Message

Add operation

Update

Delete

Other management action

System - Maintenance actions

Wizard

Admin login logout

<interface name>: Disconnect PPPoE due to Admin event

Ha enable event

Ha disable event

PPTP/L2TP Service Enabled/Disabled

Successfully

Type

string string string string

Description

Ultimate status of traffic – Allowed or

Denied

User name

Original Source IP address of traffic

Message displayed