The following article provides an overview of all operational events processed by the Barracuda CloudGen Firewall.
| Event-ID | Description | Relevance | Severity | Notification | Persistent |
|---|---|---|---|---|---|
| 10 | Disk Space Low | On at least one partition, between 70% and 90% of available disk space is in use. Disk usage is graphically depicted in the CONTROL > Resources tab. Low disk space is characterized by a yellow status bar. | Warning | 1 | yes |
| 11 | Disk Space Critical | On at least one partition, more than 90% of available disk space is in use. Disk usage is graphically depicted in the CONTROL > Resources tab . Critical disk space is characterized by a red status bar. | Error | 1 | yes |
| 20 | Memory Low | Between 70% and 90% of available memory is in use. Memory usage is graphically depicted in the CONTROL > Resources tab . Low memory availability is characterized by a yellow status bar. | Warning | 1 | yes |
| 21 | Memory Critical | More than 90% of available memory is in use. Memory usage is graphically depicted in the CONTROL > Resources tab . Critical memory availability is characterized by a red status bar. | Error | 1 | yes |
| 30 | High System Load | The "Warning" load warnings have been exceeded. Thresholds may be configured in the CONFIGURATION > Configuration Tree > Box > Infrastructure Services > Control > CPU-LOAD Monitoring section. | Warning | 1 | yes |
| 31 | Excessive System Load | The "Critical" load warnings have been exceeded. Thresholds may be configured in the CONFIGURATION > Configuration Tree > Box > Infrastructure Services > Control > CPU-LOAD Monitoring section. | Error | 1 | yes |
| 34 | Critical System Condition | The Watchdog repair binary could not be executed flawlessly (see: Watchdog; parameter Run S.M.A.R.T). | Error | 1 | yes |
| 35 | Power Outage | System power outage. | Error | 1 | yes |
| 36 | Power Restored | System power has been restored. | Information | 1 | yes |
| 48 | Device Mismatch | Network misconfiguration. Number of configured interfaces does not match number of physically available interfaces. | Error | 1 | no |
| 49 | Device Activation Failed | A network interface could not be activated. | Error | 1 | no |
| 50 | Device Down | A network interface has been disabled. | Error | 1 | yes |
| 51 | IP Address Added | The control daemon has added a shared IP to the network configuration (for example, after manual configuration changes, enabling a server, …). | Information | 1 | no |
| 52 | IP Address Removed | The control daemon has removed an existing shared IP address from the network configuration (for example, after manual configuration changes, blocking or disabling a server, …). | Information | 1 | no |
| 55 | Assigned IP Address Changed | An IP address that has been assigned to the system by a DHCP server has changed. | Information | 1 | no |
| 56 | Duplicate DHCP IP | A DHCP server-assigned IP address living on the system has additionally been detected in the network. | Warning | 1 | no |
| 57 | Dyn DNS Update Succeeded | Successful DynDNS account update. | Information | 1 | no |
| 58 | Dyn DNS Update Failed | Failed DynDNS account update. | Warning | 1 | no |
| 60 | Route Added | A route has been added to the active network configuration because, for example, an xDSL connection has been activated or a gateway has become available. | Information | 4 | no |
| 61 | Route Deleted | A route has been deleted from the system because, for example, a gateway has become unavailable. | Information | 4 | no |
| 62 | Route Changed | The state or a parameter of a route has changed. | Information | 4 | no |
| 63 | Route Enabled | A route has been activated because, for example, a shared IP has been added to the configuration. | Information | 4 | no |
| 64 | Route Disabled | A route has been disabled because, for example, a shared IP has been deleted from the configuration. | Information | 4 | no |
| 65 | Route Reactivated | See also Event-ID 66 Route Deactivated. A gateway route has been reactivated because the initial state has been restored. | Information | 4 | no |
| 66 | Route Deactivated | A gateway route has been deactivated because a former gateway IP has become a local IP on a Barracuda CloudGen Firewall system. This event might occur on secondary HA boxes when the shared IP of the primary box (former gateway IP for the secondary box) changes to the secondary box after HA takeover. | Information | 4 | no |
| 70 | Flash drive auto detection | The storage architecture option available in the box configuration file might have been misconfigured. | Error | 1 | no |
| 80 | USB Device is not connected | The Barracuda 3G modem is not connected to the firewall. | Warning | 1 | no |
| 90 | Module Error | An error occurred while loading or unloading network module drivers. See log for details. | Error | 1 | no |
| 100 | Missing Configuration File | A service configuration file cannot be retrieved. That means it might have been deleted. | Error | 1 | no |
| 110 | Missing Sysctrl | Missing sysctrl entry. See log for details. | Error | 1 | yes |
| 120 | Missing Executable | A binary needed at start-up could not be found. | Error | 1 | yes |
| 131 | Resource Missing | A resource needed for full system functionality is missing because, for example, a configured network interface is not available. | Error | 1 | no |
| 135 | Resource Limit Pending | Less than 50% of maximum command value remains (Successive Command Maximum). | Warning | 1 | yes |
| 136 | Resource Limit Exceeded | The number of concurrent connections allowed to connect to a service or a configured maximum limit has reached a critical value or has been exceeded (for example, Parallel Connection Limit, Spooling Limit). The maximum command counter has been reached or has been exceeded (Successive Command Maximum). | Warning | 1 | yes |
| 150 | Corrupted Data File | The utility dstats has identified a corrupt data file. | Error | 1 | no |
| 300 | User ID (UID) Invalid | Admin has been introduced with illegal UID. Check /etc/login.defs for setting of UID_MIN parameter. | Security | 3 | no |
| 304 | Reserved Login ID Used | Apple notification. Apple ID was used to sign in to a device. | Security | 3 | no |
| 400 | Time Discontinuity Detected | The statistics daemon has detected a time shift. That refers to a deviation from former time settings. For example, date/time settings have been changed manually, or hardware clock settings are incorrect after reboot. | Warning | 1 | no |
| 500 | Invalid License | The license installed on the system is invalid. For example, the hardware ID of the system does not match with the ID the license has been issued for, or the validity period has been exceeded. | Error | 1 | yes |
| 501 | No License Found | No valid license found. Stopping module. | Error | 1 | yes |
| 505 | License Limit Exceeded | The license limit of IPs protected by the firewall has been exceeded. | Error | 1 | no |
| 510 | Invalid Argument | The Watchdog repair binary could not be executed flawlessly (see: Watchdog). | Error | 1 | no |
| 600 | HA Partner Unreachable | Connectivity between a Barracuda CloudGen Firewall and its high availability partner is disrupted. | Error | 1 | yes |
| 610 | Reporter SSH Host Key Mismatch | The management reporter SSH host key does not match. | Error | 1 | yes |
| 620 | Box Unreachable | Connectivity between CC and one of its administered boxes is disrupted. This event is generated only on the CC. | Warning | 1 | yes |
| 622 | Box Reachable Again | Connectivity between CC and one of its administered boxes has been restored. This event is generated only on the CC. | Information | 1 | no |
| 666 | Process Core Found | The core-search utility has found a core dump of a Barracuda CloudGen Firewall process and has moved it to | Warning | 1 | no |
| 700 | SIM Card Handling | SIM card activity on firewall equipped with 3G USB modem. See log for details. | Error | 1 | yes |
| 701 | SIM Card Handling | SIM card activity on firewall equipped with 3G USB modem. See log for details. | Warning | 1 | yes |
| 702 | 3G Network Registration | This event occurs if the Barracuda M10 modem dialed in successfully to a GSM network. | Warning | 1 | yes |
| 703 | 3G Network Registration | 3G network registration on firewall equipped with 3G USB modem. | Error | 1 | yes |
| 704 | Signal Strength | 3G network signal strength on firewall equipped with 3G USB modem. | Warning | 1 | yes |
| 710 | SMS Handling | Status information of a Barracuda CloudGen Firewall via SMS. See log for details. | Error | 1 | yes |
| 711 | SMS Handling | Status information of a Barracuda CloudGen Firewall via SMS. See log for details. | Warning | 1 | yes |
| 721 | SMS Handling | Status information of a Barracuda CloudGen Firewall via SMS. See log for details. | Information | 1 | yes |
| 2000 | Start Server | Multiple services have been started either by the system or manually. | Information | 4 | no |
| 2001 | Start Service | Multiple services have been started either by the system or manually. | Information | 4 | no |
| 2002 | Start Box Service | A box service has been started either by the system or manually. | Information | 4 | no |
| 2010 | Stop Server | A server has been stopped either by the system or manually. | Information | 4 | no |
| 2011 | Stop Service | A service has been stopped either by the system or manually. | Information | 4 | no |
| 2012 | Stop Box Service | A box service has been stopped either by the system or manually. | Information | 4 | no |
| 2020 | Restart Server | Multiple services have been restarted either by the system or manually. | Information | 4 | no |
| 2021 | Restart Service | Multiple services have been restarted either by the system or manually. | Information | 4 | no |
| 2022 | Restart Box Service | A box service has been restarted either by the system or manually. | Information | 4 | no |
| 2030 | Block Server | Multiple services have been blocked manually. | Information | 4 | no |
| 2031 | Block Service | Multiple services have been blocked manually. | Information | 4 | no |
| 2032 | Block Box Service | A box service has been blocked manually. | Information | 4 | no |
| 2040 | Deactivate Server | Multiple services have been deactivated. See log for details. | Information | 4 | no |
| 2041 | Deactivate Service | A service has been deactivated. See log for details. | Information | 4 | no |
| 2042 | Deactivate Box Service | A box service has been deactivated. See log for details. | Information | 4 | no |
| 2044 | No Valid License for Service | A service is missing a valid license. See log for details. | Warning | 1 | yes |
| 2045 | Entering GRACE Mode | A system with a formerly valid license has changed into GRACE mode, either because the host key the license has been issued for does not match with the system’s host key or because the CC-administered box could not validate its license with the CC. | Warning | 1 | no |
| 2046 | Entering DEMO Mode | The system has been installed without importing a valid license, or a valid box license has been removed from it. | Error | 1 | no |
| 2047 | GRACE Mode Expired | GRACE mode has expired. | Error | 1 | no |
| 2050 | Reactivate Server | Multiple services have been reactivated. See log for details. | Information | 4 | no |
| 2051 | Reactivate Service | Multiple services have been reactivated. See log for details. | Information | 4 | no |
| 2052 | Reactivate Box Service | A box service has been reactivated. See log for details. | Information | 4 | no |
| 2054 | Subprocess Kill Requested | A sub-process has been killed manually. | Information | 1 | no |
| 2056 | Connection Kill Requested | A firewall connection termination has been forced. See log for details. | Information | 1 | no |
| 2058 | Session Kill Requested | A session kill has been requested by a Barracuda Firewall Admin user. See log for details. | Information | 1 | no |
| 2060 | Emergency Server Start | Multiple services have started because the HA partner is not available. | Warning | 1 | no |
| 2061 | Emergency Server Stop | Multiple services have stopped because the HA partner service layer is in an active state. | Warning | 1 | no |
| 2070 | Daemon Startup Failed | A daemon’s startup/shutdown has failed/succeeded. The daemon responsible for the event will be included in the event message. Eventing notifications may be configured per daemon (for example NTPd). They will only be generated for controlled startup/shutdown sequences and not for manual process terminations. | Warning | 1 | no |
| 2071 | Daemon Startup Succeeded | Information | 1 | no | |
| 2072 | Daemon Shutdown Failed | Information | 1 | no | |
| 2073 | Daemon Shutdown Succeeded | Information | 1 | no | |
| 2080 | Time Synchronization Failed | NTP sync with the configured NTP server has failed. NTP synchronization settings are defined in CONFIGURATION > Configuration Tree > Box > Administrative Settings > TIME Settings/NTP. | Warning | 1 | no |
| 2081 | Time Synchronization | NTP sync with the configured NTP server has succeeded. NTP synchronization settings are defined in CONFIGURATION > Configuration Tree > Box > Administrative Settings > TIME Settings/NTP . | Information | 1 | no |
| 2082 | Time Synchronization Denied | NTP sync with the configured NTP server has been denied. NTP synchronization settings are defined in CONFIGURATION > Configuration Tree > Box > Administrative Settings > TIME Settings/NTP . | Error | 1 | no |
| 2099 | CTRL-ALT-DEL | A system reboot has been triggered manually at the physical console by pressing the keys CTRL-ALT-DEL simultaneously. | Information | 4 | no |
| 2100 | Reboot Requested | A system reboot has been triggered manually using Barracuda Firewall Admin. | Information | 4 | no |
| 2101 | System Halt Requested | A system shutdown has been triggered manually. | Information | 4 | no |
| 2102 | Network Restart Requested | A network restart has been triggered manually using Barracuda Firewall Admin. | Information | 4 | no |
| 2103 | Activate New Network | A new network configuration has been activated manually using Barracuda Firewall Admin. | Information | 4 | no |
| 2104 | NG Firewall Start | The NGFW subsystem (network and NGFW OS processes) has been started. | Information | 1 | no |
| 2105 | NG Firewall Stop | The NGFW subsystem (network and NGFW OS processes) has been stopped. | Information | 1 | no |
| 2120 | Mail DSN Message Sent | A DSN (Delivery Status Notification) message has been generated and sent by the mail gateway (for example, due to undeliverable mail). Further DSN generation conditions are configurable in the Limits configuration section of the mail gateway. | Information | 1 | no |
| 2210 | Network Subsystem Restart | The network subsystem (routes, IP addresses, network interface drivers) has been restarted. | Information | 1 | no |
| 2212 | Unclean Network Subsystem | An error has occurred during network subsystem activation. | Warning | 1 | no |
| 2220 | Network Subsystem Shutdown | The network subsystem (routes, IP addresses, network interface drivers) has been shut down. | Information | 1 | no |
| 2222 | Unclean Network Subsystem | An error has occurred during network subsystem shutdown. | Information | 1 | no |
| 2230 | Network Subsystem Check | The network subsystem configuration has been checked for consistency. | Information | 1 | no |
| 2232 | Network Subsystem Check | The network subsystem configuration has been checked for consistency. | Information | 1 | no |
| 2234 | Network Subsystem Check Failed | An error has been discovered during network subsystem configuration check. | Warning | 1 | no |
| 2240 | Link Activation Failed | Activation of a dynamic link (for example, xDSL, WWAN, or DHCP) has failed. The reason for activation failure is provided in the event message. | Error | 1 | no |
| 2242 | Sublink Activation Failed | Activation of a dynamic network subsystem (e.g., DHCP, UMTS or DSL) failed. See log for details. | Error | 1 | no |
| 2250 | PCMCIA Bus Reset | Resetting the PCMCIA bus to recover from potential modem lockup by power cycling it. | Error | 1 | no |
| 2380 | Flawed Configuration Data | The rule file containing the domain settings of the mail gateway service is either missing or a corrupt rule file has been loaded. This event is only reported when parameter Bad Rulefile Loaded is set to yes. | Error | 1 | no |
| 2500 | FW Forwarding Loop Suppressed | These events are triggered when the firewall engine delivers a local targeted session from the local firewall to the forwarding firewall (because of a non-existing local listening socket), and in the forwarding firewall a rule matches that does not perform DNAT. | Information | 1 | no |
| 2502 | FW Local Redirection Suppressed | Information | 1 | no | |
| 2511 | FW Worker Limit Exceeded | Firewall worker limit has exceeded the maximum value. See log for details. | Error | 1 | yes |
| 3000 | VPN Server Tunnel Terminated | The VPN peer IP address and/or gateway is unavailable, or the VPN tunnel has been terminated manually. | Information | 1 | no |
| 3001 | VPN Alternative Tunnel Activated | A VPN alternative tunnel will be activated when the active partner of the tunnel changes its bind-IP address (for example, provider failure). | Warning | 1 | no |
| 3002 | VPN Server Tunnel Activated | A VPN site-to-site tunnel has been activated. | Information | 1 | no |
| 4700 | Query Activation State Failed | Only on a Control Center: Query for activation state for licenses to licensing servers failed | Warning | 1 | no |
| 4701 | Got Unknown Activation State | Only on a Control Center: Query for activation state for licenses returned unknown result or status | Warning | 1 | no |
| 4702 | License Download Failed | Only on a Control Center: Failed to download new licenses from licensing servers | Warning | 1 | no |
| 4320 | Emergency Override Triggered | An emergency override has been done on a managed box. Note:
| Warning | 2 | yes |