Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 20: IPS Attack and System Event Responses
Creating system responses
574
Table 40: Description of pre-defined system events
Event Description
Access Control List Detects all ACL audit events.
all audit Detects all attack and system events, regardless of
characteristics.
config change Detects when the Sidewinder G2’s configuration changes.
error Detects all system events identified as AUDIT_T_ERROR
in the audit stream.
HA failover Detects when a failover IP address changes because a
High Availability cluster failed over to its secondary/
standby.
hardware software
failure
host license
exceeded
Detects when a hardware or software component fails.
Detects when the number of hosts protected by the
Sidewinder G2 exceeds the number of licensed hosts.
IPSEC error Detects when traffic generates IPSEC errors.
license expiration Detects when a licensed feature is about to expire.
log overflow Detects when the log partition is close to filling up.
network traffic Detects all connections that successfully pass through the
Sidewinder G2.
not config change Detects all attack and system events that are not
configuration changes.
power failure Detects when an Uninterruptible Power Supply (UPS)
device detects a power failure and the Sidewinder G2 is
running on UPS battery power.
syslog Detects all audit attacks and system events created via
syslog.
system all Detects all system events of all severities, including power
failures, hardware and software failures, failover events,
license expiration, host license exceeded, log overflows,
and IPSEC errors.
system critical Detects all critical system events, including power failures,
hardware failures, critical software failures, and failover
events. Critical system events indicate that a component
or subsystem stopped working, that the system is going
down (expectedly or unexpectedly), or that the system is
not expected to work again without intervention.
More...