Cisco Firepower 4110

Cisco Preparative Procedures & Operational User Guide
© 2016 Cisco Systems, Inc. All rights reserved.
SFR
Auditable
Event
Actual Audited Event
certificate
charon-custom
%AUTHPRIV-6-SYSTEM_MSG: 07[IKE] received
AUTHENTICATION_FAILED notify error - charon-custom
FMT_MOF.1(1)/
TrustedUpdate
Any attempt
to initiate a
manual
update
%FPRM-6-EVENT: [E4197594][213626][transition][internal][]
[FSM:STAGE:SKIP]: Request to upgrade software on server 1/1(FSM-
STAGE:sam:dme:ComputePhysicalAssociate:updateSspOsSoftware)
IP_ADDRESS 24/01 14:32:21.966
FMT_MOF.1(1)/
AdminAct
Modification
of the
behaviour of
the TSF.
See FMT_MTD.1.
FMT_MOF.1(2)/
AdminAct
Starting and
stopping of
services.
FPRM-6-AUDIT:
[USERNAME][USERNAME][modification][web_45842_A][1385040][sys/svc-
ext/syslog/client-secondary][adminState(Old:disabled, New:enabled)][] Syslog
Remote Destination IP_ADDRESS modified
%FPRM-6-AUDIT:
[USERNAME][USERNAME][modification][web_42962_A][1383935][sys/svc-
ext/syslog/client-primary][adminState(Old:enabled, New:disabled)][] Syslog
Remote Destination IP_ADDRESS modified
FMT_MTD.1
All
management
activities of
TSF data.
%FPRM-6-AUDIT:
[USERNAME][USERNAME][creation][pts_0_1_16141][229312][sys/user-
ext/pre-login-banner][message:This is a CC test banner , policyOwner:local][]
PreLoginBanner created
%AUTHPRIV-5-SYSTEM_MSG: USERNAME : TTY=ttyS0 ;
PWD=/bootflash/sysdebug/coremgmt/sam_dump ; USER=root ;
COMMAND=command – sudo
FPT_TUD_EXT.1
Initiation of
update; result
of the update
attempt
(success or
failure)
%FPRM-6-EVENT: [E4197594][213626][transition][internal][]
[FSM:STAGE:SKIP]: Request to upgrade software on server 1/1(FSM-
STAGE:sam:dme:ComputePhysicalAssociate:updateSspOsSoftware)
IP_ADDRESS 24/01 14:32:21.966
%FPRM-6-EVENT: [E4195294][315220][transition][internal][]
[FSM:STAGE:ASYNC]: unpacking image fxos-k9.2.0.1.135.SPA on
primary(FSM-
STAGE:sam:dme:FirmwareDownloaderDownload:UnpackLocal)
IP_ADDRESS 24/01 16:17:34.001
%FPRM-6-EVENT: [E4195293][181179][transition][internal][]
[FSM:STAGE:REMOTE-ERROR]: Result: end-point-failed Code: ERR-
DNLD-invalid-image Message: invalid
image#(sam:dme:FirmwareDownloaderDownload:Local)
IP_ADDRESS 24/01 14:02:54.555
FPT_STM.1
Changes to
%AUTHPRIV-5-SYSTEM_MSG: USERNAME : TTY=ttyS0 ;