Cisco Firepower 4110 Preparative Procedures & Operational User Manual page 21

Cisco Preparative Procedures & Operational User Guide
SFR Auditable
Event
certificate
FMT_MOF.1(1)/ Any attempt
TrustedUpdate to initiate a
manual
update
FMT_MOF.1(1)/ Modification
AdminAct of the
behaviour of
the TSF.
FMT_MOF.1(2)/ Starting and
AdminAct stopping of
services.
FMT_MTD.1 All
management
activities of
TSF data.
FPT_TUD_EXT.1 Initiation of
update; result
of the update
attempt
(success or
failure)
FPT_STM.1 Changes to
© 2016 Cisco Systems, Inc. All rights reserved.
Actual Audited Event
charon-custom
%AUTHPRIV-6-SYSTEM_MSG: 07[IKE] received
AUTHENTICATION_FAILED notify error - charon-custom
%FPRM-6-EVENT: [E4197594][213626][transition][internal][]
[FSM:STAGE:SKIP]: Request to upgrade software on server 1/1(FSM-
STAGE:sam:dme:ComputePhysicalAssociate:updateSspOsSoftware)
IP_ADDRESS 24/01 14:32:21.966
See FMT_MTD.1.
FPRM-6-AUDIT:
[USERNAME][USERNAME][modification][web_45842_A][1385040][sys/svc-
ext/syslog/client-secondary][adminState(Old:disabled, New:enabled)][] Syslog
Remote Destination IP_ADDRESS modified
%FPRM-6-AUDIT:
[USERNAME][USERNAME][modification][web_42962_A][1383935][sys/svc-
ext/syslog/client-primary][adminState(Old:enabled, New:disabled)][] Syslog
Remote Destination IP_ADDRESS modified
%FPRM-6-AUDIT:
[USERNAME][USERNAME][creation][pts_0_1_16141][229312][sys/user-
ext/pre-login-banner][message:This is a CC test banner , policyOwner:local][]
PreLoginBanner created
%AUTHPRIV-5-SYSTEM_MSG: USERNAME : TTY=ttyS0 ;
PWD=/bootflash/sysdebug/coremgmt/sam_dump ; USER=root ;
COMMAND=command – sudo
%FPRM-6-EVENT: [E4197594][213626][transition][internal][]
[FSM:STAGE:SKIP]: Request to upgrade software on server 1/1(FSM-
STAGE:sam:dme:ComputePhysicalAssociate:updateSspOsSoftware)
IP_ADDRESS 24/01 14:32:21.966
%FPRM-6-EVENT: [E4195294][315220][transition][internal][]
[FSM:STAGE:ASYNC]: unpacking image fxos-k9.2.0.1.135.SPA on
primary(FSM-
STAGE:sam:dme:FirmwareDownloaderDownload:UnpackLocal)
IP_ADDRESS 24/01 16:17:34.001
%FPRM-6-EVENT: [E4195293][181179][transition][internal][]
[FSM:STAGE:REMOTE-ERROR]: Result: end-point-failed Code: ERR-
DNLD-invalid-image Message: invalid
image#(sam:dme:FirmwareDownloaderDownload:Local)
IP_ADDRESS 24/01 14:02:54.555
%AUTHPRIV-5-SYSTEM_MSG: USERNAME : TTY=ttyS0 ;