Fields specific to the "l_xvpn" log

The fields described below appear in the web administration interface of the firewall under the following Logs - Audit logs modules:

  • Logs: SSL VPN,
  • Views: All logs, Network traffic and VPN.

user

Name of the user accessing SSL VPN.

String of characters in UTF-8 format. Example: “john.smith”

May be displayed anonymously depending on the administrator's access privileges.

Available from: SNS v1.0.0.

User

arg

Argument of the executed command.

String of characters in UTF-8 format. Example: “/documentation”

Argument

error

Return code of the SSL VPN access.

Example: “0”, “5”, “8", etc.

Result

Example: “Success”, “Access denied”, “Connect to host failed”…

msg

Message associated with the return code.

String of characters in UTF-8 format. Example: “Access to host”, “Bad or no cookie found”…

Message

src

IP address of the source host.

Decimal format. Example: ”192.168.0.1”

May be displayed anonymously depending on the administrator's access privileges.

Available from: SNS v1.0.0.
Source

srcname

Name of the object corresponding to the source host.

String of characters in UTF-8 format. Example: “client_workstation”

May be displayed anonymously depending on the administrator's access privileges.

Available from: SNS v1.0.0.

Source name

localnet

Network address used by the firewall to set up the SSL VPN tunnel

Decimal format. Example: ”192.168.53.2”
Local network

remotenet

Network address assigned to the client to set up the SSL VPN tunnel

Decimal format. Example: ”192.168.53.3”
Remote network

dst

IP address of the destination host

Decimal format. Example: ”192.168.50.1”

Available from: SNS v1.0.0.

Destination

dstport

Destination port number.

Decimal format. Example: "80"

Available from: SNS v1.0.0.

Destination port

dstportname

Name of the object corresponding to the destination port.

String of characters in UTF-8 format. Example: “http”

Available from: SNS v1.0.0.

Dest. port name

dstname

Name of the object (FQDN name) corresponding to the destination host.

String of characters in UTF-8 format. Example: “server.company.com”

Available from: SNS v1.0.0.

Destination name

domain

Authentication method used or LDAP directory of the user authenticated by the firewall.

String of characters in UTF-8 format.

Example: domain="documentation.stormshield.eu"

Available from: SNS v3.0.0.
Method or directory