HP LaserJet Enterprise, HP PageWide Enterprise - HP Security Event Logging Messaging Reference (white paper)

Chapter 2 – Enhanced security event logging 112
• AP
• STA
Message:
<device type>: IPsec/Firewall service policy deleted; time="<timestamp>" policy_name="<name>"
user=“<user>“ source_IP="<client computer IP address>" outcome=success interface=<interface>
Interface(s):
EWS
Syslog severity:
Warning
Explanation:
An IPsec/Firewall service template was deleted.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<name> - Template name.
<user> - User who deleted the IPsec/Firewall address template.
<client computer IP address> - IP address of the client computer that sent the request to delete
the IPsec/Firewall address template.
<interface> - Networking interface on the local device that received the request to delete the
IPsec/Firewall address template. Possible values are:
• Wired
• AP
• STA
IPsec/Firewall advanced options
Message:
<device type>: IPsec/Firewall configuration change; time="<timestamp>" item=advanced_settings
value=<advanced option> user="<user>" source_IP="<client computer IP address>"
outcome=success interface=<interface>
Interface(s):
EWS
Syslog severity:
Warning
Explanation:
An IPsec/Firewall policy advanced option was modified.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<advanced option> - IPsec/Firewall policy advanced option that was modified. Possible values are:
• WS-Discovery_service
• IGMPv2_service
• ICMPv6_service
• ICMPv4_service
• Bonjour_service
• SLP_service
• DHCPv6_service
• DHCPv4_BOOTP_service
• NTP_service
• Fail_Safe_option
• IKE_Retries
• IKE_Retransmit_interval
• Dead_Peer_Timer
<user> - User who modified the IPsec/Firewall policy advanced option.
<client computer IP address> - IP address of the client computer that sent the request to modify
the IPsec/Firewall policy advanced option.