RippleTech
Page:1/2
5/26/2006 2:05:27 PM
All Checkpoint Firewall-1 Events
Description
Allows reporting on all collected events from the monitored systems.
For more information on various Windows events, go to :
Parameters
Database Servers
All
Computers
All
Accounts
All
Sources
WSH
Categories
All
IDs
All
Logs
All
Types
All
Message Search Criteria
Include events with any of the message text keywords: LogCaster-CheckPoint-Audit-Log
Time Frame
Last 2 Month(s)
Start Date Time
2006-04-01 00:00:00
End Date Time
2006-06-01 00:00:00
Date / Time
Id
Log
Type
Category
Source
Computer
Account
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 7:4403 accept 10.66.93.44 < productSmartDashboard
Operation:Log In
Administrator:adminuser
Machine:guardian-cqbuo0
Subject:Administrator Login
Additional Info:Authentication methodPassword
Operation Number:7
Count: 2
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 7:4543 accept 10.66.93.44 < productSmartDashboard
ObjectName:testing
ObjectType:network
ObjectTable:network_objects
Operation:Create Object
Uid:{EC0EC375-4B74-4995-96ED-E02502F862A8}
Administrator:adminuser
Machine:guardian-cqbuo0
Subject:Object Manipulation
Operation Number:0
Count: 2
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 7:4543 accept 10.66.93.44 < productSmartDashboard
ObjectName:testing
ObjectType:network
ObjectTable:network_objects
Operation:Delete Object
Uid:{EC0EC375-4B74-4995-96ED-E02502F862A8}
Administrator:adminuser
Machine:guardian-cqbuo0
Subject:Object Manipulation
Operation Number:3
Count: 2
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 7:4543 accept 10.66.93.44 < productSmartDashboard
ObjectName:testing
ObjectType:network
ObjectTable:network_objects
Operation:Modify Object
Uid:{EC0EC375-4B74-4995-96ED-E02502F862A8}
Administrator:adminuser
Machine:guardian-cqbuo0
FieldsChanges:ipaddrchanged from '1.1.1.0' to '1.1.0.0'
netmask:changed from '255.255.255.0' to '255.255.0.0'
Subject:Object Manipulation
Operation Number:1
Count: 2
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 7:4554 accept 10.66.93.44 < productSmartDashboard
Operation:Log Out
Administrator:adminuser
Machine:guardian-cqbuo0
Subject:Administrator Login
Operation Number:9
Count: 2
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 0:0100 ctl HOCPMGMT >daemon log_sys_messageLog file has been switched to2006-04-20_000100_1.log
product:VPN-1 & FireWall-1
Count: 1
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 0:5044 keyinst HOCPMGMT >daemon productVPN-1 & FireWall-1
Internal_CA:Renewed CRL 0
Count: 1
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 0:5044 keyinst HOCPMGMT >daemon productVPN-1 & FireWall-1
Internal_CA:Renewed CRL 1
Count: 1
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 1:4841 HOCPMGMT < alert productSystem Monitor
System Alert message:CPU usage on NROPXFW1 is more than 90% (currently 92%)
Object:NROPXFW1
Event:Exception
Parameter:CPU usage
Condition:is more than 90
Current value:92
Count: 1
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 1:4941 HOCPMGMT < productSystem Monitor
System Alert message:CPU usage on NROPXFW1 has returned to normal
Object:NROPXFW1
Event:Recovery
Parameter:CPU usage
Condition:is more than 90
Current value:90
Count: 1
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 1:5843 HOCPMGMT < alert productSystem Monitor
System Alert message:CPU usage on NROPXFW1 is more than 90% (currently 93%)
Object:NROPXFW1
Event:Exception
Parameter:CPU usage
Condition:is more than 90
Current value:93
Count: 1
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 2:0043 HOCPMGMT < productSystem Monitor
System Alert message:CPU usage on NROPXFW1 has returned to normal
Object:NROPXFW1
Event:Recovery
Parameter:CPU usage
Condition:is more than 90
Current value:90
Count: 1
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 2:0427 HOCPMGMT < alert productSystem Monitor
System Alert message:CPU usage on esafw2p is more than 90% (currently 96%)
Object:ESAFWProd
Event:Exception
Parameter:CPU usage
Condition:is more than 90
Current value:96
Count: 1
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 2:0728 HOCPMGMT < productSystem Monitor
System Alert message:CPU usage on esafw2p has returned to normal
Object:ESAFWProd
Event:Recovery
Parameter:CPU usage
Condition:is more than 90
Current value:89
Count: 1
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 2:1646 HOCPMGMT < alert productSystem Monitor
System Alert message:CPU usage on NROPXFW1 is more than 90% (currently 91%)
Object:NROPXFW1
Event:Exception
Parameter:CPU usage
Condition:is more than 90
Current value:91
Count: 1
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 2:1746 HOCPMGMT < productSystem Monitor
System Alert message:CPU usage on NROPXFW1 has returned to normal
Object:NROPXFW1
Event:Recovery
Parameter:CPU usage
Condition:is more than 90
Current value:84
Count: 1
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 6:3558 accept HOCPMGMT < default device messageSyslog daemon started
product:VPN-1 & FireWall-1
Count: 1

RippleTech
Page:2/2
5/26/2006 2:05:27 PM
Date / Time
Id
Log
Type
Category
Source
Computer
Account
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 6:3603 keyinst HOCPMGMT >daemon productVPN-1 & FireWall-1
Internal_CA:started
Count: 1
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 6:3629 HOCPMGMT < alert productSystem Monitor
System Alert message:hovpnra3 is disconnected
Object:HOTEST
Event:Exception
Parameter:Status connection
Condition:is not connected
Current value:untrusted
Count: 1
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 6:3631 HOCPMGMT < alert productSystem Monitor
System Alert message:Management Server on nrocpmgmt is not synchronized
Object:nrocpmgmt
Event:Exception
Parameter:Synchronization state
Condition:is Not synchronized
Current value:Not synchronized
Count: 1
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 6:3651 HOCPMGMT < alert productSystem Monitor
System Alert message:brovpnra1 is disconnected
Object:brovpnra1
Event:Exception
Parameter:Status connection
Condition:is not connected
Current value:disconnected
Count: 1
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 6:3652 HOCPMGMT < alert productSystem Monitor
System Alert message:lifefw1q is disconnected
Object:lifefw1q
Event:Exception
Parameter:Status connection
Condition:is not connected
Current value:disconnected
Count: 1
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 6:3733 HOCPMGMT < alert productSystem Monitor
System Alert message:CPU usage on lifefw1p is more than 90% (currently 99%)
Object:lifefw1p
Event:Exception
Parameter:CPU usage
Condition:is more than 90
Current value:99
Count: 1
LogCasterRA
4/21/2006 1:56:52 PM
4
Application
Information
None
WSH
LOGCASTERPROD
N/A
LogCaster-CheckPoint-Audit-Log
21Apr2006 7:4122 accept 10.66.93.44 < productSmartDashboard
Operation:Log Out
Administrator:nntscxg
Machine:guardian-cqbuo0
Subject:Administrator Login
Operation Number:9
Count: 1