Describes details about Enhanced Firewall Services (EFS) related Enterprise and Operator Orchestrator events.
Enterprise-level EFS Events
| EVENT | DISPLAYED ON ORCHESTRATOR UI AS | SEVERITY | GENERATED BY | GENERATED WHEN | RELEASE ADDED IN | DEPRECATED |
|---|---|---|---|---|---|---|
| MGD_ATPUP_INVALID_IDPS_SIGNATURE |
MGD_ATPUP_INVALID_IDPS_SIGNATURE |
ERROR |
SD-WAN Edge (MGD) | Generated when there is an invalid suricata package. |
5.2 | |
| MGD_ATPUP_DOWNLOAD_IDPS_SIGNATURE_FAILED |
MGD_ATPUP_DOWNLOAD_IDPS_SIGNATURE_FAILED |
ERROR |
SD-WAN Edge (MGD) | Generated when downloading of suricata package fails. |
5.2 | |
| MGD_ATPUP_DECRYPT_IDPS_SIGNATURE_FAILED |
MGD_ATPUP_DECRYPT_IDPS_SIGNATURE_FAILED |
ERROR |
SD-WAN Edge (MGD) | Generated when unpacking of suricata package fails. | 5.2 | |
| MGD_ATPUP_APPLY_IDPS_SIGNATURE_FAILED |
MGD_ATPUP_APPLY_IDPS_SIGNATURE_FAILED |
ERROR |
SD-WAN Edge (MGD) | Generated due to error in applying Suricata files. |
5.2 | |
| MGD_ATPUP_APPLY_IDPS_SIGNATURE_SUCCEEDED |
MGD_ATPUP_APPLY_IDPS_SIGNATURE_SUCCEEDED |
INFO | SD-WAN Edge (MGD) | Generated when suricata files are successfully applied. |
5.2 | |
| MGD_ATPUP_STANDBY_UPDATE_START |
MGD_ATPUP_STANDBY_UPDATE_START |
INFO | SD-WAN Edge (MGD) | Generated when HA Standby update with new EFS IDPS Signature version is started. |
5.2 | |
| MGD_ATPUP_STANDBY_UPDATE_FAILED |
MGD_ATPUP_STANDBY_UPDATE_FAILED |
ERROR | SD-WAN Edge (MGD) | Generated when HA Standby update with new EFS IDP Signature version fails. |
5.2 | |
| MGD_ATPUP_STANDBY_UPDATED |
MGD_ATPUP_STANDBY_UPDATED |
INFO | SD-WAN Edge (MGD) | Generated when HA Standby update with new EFS IDPS Signature version is successfully applied. |
5.2 |
Operator-level EFS Events
| EVENT | DISPLAYED ON ORCHESTRATOR UI AS | SEVERITY | GENERATED BY | GENERATED WHEN | RELEASE ADDED IN | DEPRECATED |
|---|---|---|---|---|---|---|
| IDPS_SIGNATURE_VCO_VERSION_CHECK_FAIL | Querying existing signature version from local DB failed | ERROR | SASE Orchestrator | When SASE Orchestrator backend poll job has failed to retrieve existing suricata signature version from Orchestrator's local database. | 5.2.0 | |
| IDPS_SIGNATURE_GSM_VERSION_CHECK_FAIL | Querying signature metadata from GSM failed | ERROR | SASE Orchestrator | When SASE Orchestrator backend poll job has failed to retrieve existing suricata signature metadata (that includes signature version) from GSM. | 5.2.0 | |
| IDPS_SIGNATURE_SKIP_DOWNLOAD_NO_UPDATE | Skipping signature download due to no change in signature version | INFO | SASE Orchestrator | When SASE Orchestrator backend poll job skips downloading suricata signature file due to no change in suricata signature file version. | 5.2.0 | |
| IDPS_SIGNATURE_STORE_FAILURE_NO_PATH | Filestore path not set to store signature file | ERROR | SASE Orchestrator | When SASE Orchestrator backend poll job fails to store suricata signature file due to filestore path not being set. | 5.2.0 | |
| IDPS_SIGNATURE_DOWNLOAD_SUCCESS | Successfully downloaded signature file from GSM | INFO | SASE Orchestrator | When SASE Orchestrator backend poll job successfully downloads suricata signature file from GSM. | 5.2.0 | |
| IDPS_SIGNATURE_DOWNLOAD_FAILURE | Failed to download signature file from GSM | ERROR | SASE Orchestrator | When SASE Orchestrator backend poll job fails to download suricata signature file from GSM. | 5.2.0 | |
| IDPS_SIGNATURE_STORE_SUCCESS | Successfully stored the signature file in filestore | INFO | SASE Orchestrator | When SASE Orchestrator backend poll job successfully stores the suricata signature file in local file store. | 5.2.0 | |
| IDPS_SIGNATURE_STORE_SIGNATURE_FAILURE | Failed to store the signature file in filestore | ERROR | SASE Orchestrator | When SASE Orchestrator backend poll job fails to store the suricata signature file in local file store. | 5.2.0 | |
| IDPS_SIGNATURE_METADATA_INSERT_SUCCESS | Successfully added metadata of the signature file to local DB | INFO | SASE Orchestrator | When SASE Orchestrator backend poll job successfully adds metadata of the suricata signature file to local DB. | 5.2.0 | |
| IDPS_SIGNATURE_METADATA_INSERT_FAILURE | Failure to add metadata of the signature file to local DB | ERROR | SASE Orchestrator | When SASE Orchestrator backend poll job fails to add metadata of the suricata signature file to local DB. | 5.2.0 |
