HP LaserJet Enterprise, HP PageWide Enterprise - HP Security Event Logging Messaging Reference (white paper)

Chapter 2 – Enhanced security event logging 116
<interface> - Networking interface on the local device that received the request to delete the
IPsec policy. Possible values are:
• Wired
• AP
• STA
IPsec policy with IKEv1
Message:
<device type>: IPsec policy added; time="<timestamp>" policy_name="<name>"
item=identity_authentication_option value=<value> user="<user>" source_IP="<client computer
IP address>" outcome=success interface=<interface>
Interface(s):
EWS
Syslog severity:
Warning
Explanation:
An IKEv1 IPsec policy was added.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<name> - IPsec policy name.
<value> - Authentication method that will be used by both endpoints to perform mutual
authentication. Possible values are:
• Pre-shared_key
• Certificates
• Kerberos
<user> - User who added the IPsec policy.
<client computer IP address> - IP address of the client computer that sent the request to add the
IPsec policy.
<interface> - Networking interface on the local device that received the request to add the IPsec
policy. Possible values are:
• Wired
• AP
• STA
Message:
<device type>: IPsec policy modified; time="<timestamp>" policy_name="<name>"
item=identity_authentication_option value=<value> old_value=<old value> user=“<user>“
source_IP="<client computer address>" outcome=success interface=<interface>
Interface(s):
EWS
Syslog severity:
Warning
Explanation:
An IKEv1 IPsec policy was modified.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<name> - IPsec policy name.
<value> - Authentication method that will be used by both endpoints to perform mutual
authentication. Possible values are:
• Pre-shared_key
• Certificates
• Kerberos
<old value> - Previous authentication method used by both endpoints to perform mutual
authentication. Possible values are:
• Pre-shared_key