We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see https://campus.barracuda.com/doc/71862301/ for further information on our EoS policy.

Operational Events

  • Last updated on

The following article provides an overview on all operational events that are processed by the Barracuda NG Firewall.

Event-IDDescriptionRelevanceSeverityNotificationPersistent
10 Disk Space Low 

On at least one partition between 70 and 90 % of available disk space are in use. Disk usage is graphically depicted in the CONTROL > Resources tab. Low disk space is characterized by a yellow status bar.

Warning 1yes
11Disk Space Critical

On at least one partition more than 90 % of available disk space are in use. Disk usage is graphically depicted in the CONTROL > Resources tab. Critical disk space is characterized by a red status bar.

Error

1yes
20 Memory Low

At least 70 or up to 90 % of available memory are in use. Memory usage is graphically depicted in the CONTROL > Resources tab. Low memory availability is characterized by a yellow status bar.

Warning

 
1yes
21Memory Critical

More than 90 % of available memory are in use. Memory usage is graphically depicted in the CONTROL > Resources tab. Critical memory availability is characterized by a red status bar.

Error

 
1yes
30High System Load  

The "Warning" Load Warnings have been exceeded. Thresholds may be configured in CONFIGURATION > Configuration Tree > Box > Infrastructure Services > Control > CPU-LOAD Monitoring section.

Warning 1yes
31Excessive System Load 

The "Critical" Load Warnings have been exceeded. Thresholds may be configured in CONFIGURATION > Configuration Tree > Box > Infrastructure Services > Control > CPU-LOAD Monitoring section.

Error 1yes
34Critical System Condition  

The Watchdog repair binary could not be executed flawlessly (see: Watchdog; parameter Run S.M.A.R.T).

Error 1yes
48Device Mismatch

See description.

Error

1no
49Device Activation FailedA network interface could not be activated.Error 1no
50Device DownA network interface has been disabled. Error1yes
51IP Address Added

The control daemon has added a server IP to the network configuration (for example after manual configuration changes, enabling a server, …).

Information

1no
52

IP Address Removed

The control daemon has removed a hitherto existing server IP address from the network configuration (for example after manual configuration changes, blocking or disabling a server, …).Information1no
54IP Property Change FailedNot available.Error  1no
55

Assigned IP Address Changed

An IP address, which has been assigned to the system by an DHCP server has changed.

Information

1no
56Duplicate DHCP IP 

An DHCP server assigned IP address living on the system has additionally been detected in the network.

Warning1no
57Dyn DNS Update Succeeded

Update of a configured DynDNS account (for example DHCP network or ISDN network configuration) has succeeded/failed.

Information

1no
58Dyn DNS Update Failed  Warning1no
60Route Added

A route has been added to the active network configuration, for example because an xDLS connection has been activated or a gateway has become available.

Information 4no
61Route Deleted

A route has been deleted from the system, for example because a gateway has become unavailable.

Information4no
62

Route Changed

The state or a parameter of a route has changed.

Information

4no
63

Route Enabled

A route has been activated, because for example a server IP has been added to the configuration.

Information 4no
64

Route Disabled

A route has been disabled, because for example a server IP has been deleted from the configuration.

Information4no
65

Route Reactivated

See also Event-ID 66 Route Deactivated. A gateway route has been reactivated because the initial state has been restored.

Information

4no
66

Route Deactivated

A gateway route has been deactivated because a former gateway IP has become a local IP on a Barracuda NG Firewall system. This event might occur on secondary HA boxes, when the server IP of the primary box (former gateway IP for the secondary box) changes to the secondary box after HA takeover.

Information

4no
70

Flash RAM auto detection

The Storage Architecture option available in the Box Configuration file might have been misconfigured.

Error1no
90Module Error

See description.

Error1no
100

Missing Configuration File

A server or service configuration file cannot be retrieved, that means it might have been deleted.

Error1no
110

Missing Sysctrl

Not available.

Error1yes
120

Missing Executable

A binary needed at start-up could not be found (for example for setting parameters, …).

Error

1yes
131

Resource Missing

A resource needed for full system functionality is missing, for example a configured network interface is not available.

Error

1no
135Resource Limit Pending

Less than 50 % of maximum command value remain (see: - Successive Command Maximum).

Warning

1yes
136Resource Limit Exceeded  

The number of concurrent connections allowed to connect to a service or a configured maximum limit has reached a critical value or has been exceeded (for example, see: - Parallel Connection Limit, Spooling Limit). The maximum command counter has been reached or has been exceeded (- Successive Command Maximum).

 
Warning 1yes
150Corrupted Data File

The utility dstats has identified a corrupt data file (see: - Statistics).

Error1no
400Time Discontinuity Detected 

The statistics daemon has detected a time shift, that means a deviation from former time settings (for example date/time settings have been changed manually, hardware clock settings are wrong after reboot).

Warning

1no
500 Invalid License

The license that is installed on the system is invalid, for example the Hardware ID of the system does not match with the ID the license has been issued for or the validity period has been exceeded.

Error

1yes
501No License FoundSee description.

Error

1yes
505License Limit Exceeded

The license limit of IPs protected by the firewall has been exceeded.

 
 

Error

 1no 
510

Invalid Argument 

 

The Watchdog repair binary could not be executed flawlessly (see: Watchdog).

 
 

Error

 1 no
600HA Partner Unreachable 

Connectivity between a Barracuda NG Firewall and its high availability partner is disrupted.

Error

 
1yes
610Reporter SSH Host Key MismatchThe Management Reporter SSH host key does not match. Error1yes
620

Box Unreachable

Connectivity between CC and one of its administered boxes is disrupted. This event is only generated on the CC.

Warning1yes
622

Box Reachable Again 

Connectivity between CC and one of its administered boxes has been restored. This event is only generated on the CC.

Information1no
666 

Process Core Found 

The core-search utility has found a core dump of a Barracuda NG Firewall process and has moved it to /var/phion/crash.

Warning1no
700SIM Card HandlingSee description.Error1yes
701SIM Card HandlingSee description.Warning1yes
7023G Network RegistrationThis event occurs if the Barracuda M10 modem dialed in successfully into a GSM network.Warniing1yes
7033G Network RegistrationSee description.Error1yes
704Signal StrengthSee description.Warning1yes
710SMS HandlingSee description.Error1yes
711SMS HandlingSee description.Warning1yes
721SMS HandlingSee description.Information1yes
2000Start ServerA server has been started either by the system or manually.Information4no
2001Start Service A service has been started either by the system or manually.Information4no
2002Start Box ServiceA box-service has been started either by the system or manually.Information4no
2010Stop ServerA server has been stopped either by the system or manually.Information4no
2011Stop ServiceA service has been stopped either by the system or manually.Information4no
2012Stop Box Service A box-service has been stopped either by the system or manually.Information4no
2020Restart Server

A server has been restarted either by the system or manually.

Information

4no
2021Restart Service

A service has been restarted either by the system or manually.

Information

4no
2022Restart Box Service 

A box-service has been restarted either by the system or manually. 

Information

4no
2030Block Server

A server has been blocked manually.

Information

4no
2031Block ServiceA service has been blocked manually.Information4no
2032Block Box Service

A box-service has been blocked manually.

Information 4no
2040Deactivate ServerSee description.Information4no
2041

Deactivate Service

See description.

Information

4no
2042

Deactivate Box Service 

See description.

Information4no
2044

No Valid License for Service

See description.

Warning 1yes
2045Entering GRACE Mode 

A system with a formerly valid license has changed into grace mode, either because the host-key the license has been issued for does not match with the system’s host key or because the CC-administered box could not validate its license with the CC.

Warning

1no
2046Entering DEMO ModeThe system has been installed without importing a valid license or a valid box license has been removed from it.Error1no
2047GRACE Mode ExpiredGrace mode has expired. Error1no
2050Reactivate Server See description.Information4no
2051Reactivate ServiceSee description.Information4no
2052Reactivate Box Service See description.Information4no
2054Subprocess Kill Requested  A sub-process has been killed manually. Information1no
2056Connection Kill Requested 

See description.

Information1no
2058Session Kill Requested See description.Information1no
2060Emergency Server Start

A server has started because the HA partner is not available.

Warning 1no
2061Emergency Server Stop

A server has stopped because the HA partner server is in state active.

Warning 1no
2070Daemon Startup Failed 

A daemon’s startup/shutdown has failed/succeeded. The daemon responsible for the event will be included in the event message. Eventing notifications may be configured per daemon (for example NTPd - see: ). They will only be generated for controlled startup/shutdown sequences and not for manual process terminations.





Warning 1no
2071Daemon Startup SucceededInformation 1no
2072Daemon Shutdown FailedInformation1no
2073Daemon Shutdown SucceededInformation1no
2080

Time Synchronization Failed 

NTP sync with the configured NTP server has failed. NTP synchronization settings are defined in CONFIGURATION > Configuration Tree > Box > Administrative Settings > TIME Settings/NTP.

Warning

 
1no
2081

Time Synchronization
Succeeded

 

NTP sync with the configured NTP server has succeeded. NTP synchronization settings are defined in CONFIGURATION > Configuration Tree > Box > Administrative Settings > TIME Settings/NTP.

Information

 
1no
2082Time Synchronization Denied 

NTP sync with the configured NTP server has been denied. NTP synchronization settings are defined in CONFIGURATION > Configuration Tree > Box > Administrative Settings > TIME Settings/NTP.

Error

1no
2099CTRL-ALT-DEL 

A system reboot has been triggered manually at the physical console by pressing the keys CTRL-ALT-DEL simultaneously.

Information4no
2100Reboot Requested A system reboot has been triggered manually using Barracuda NG Admin. Information4no
2101System Halt Requested A system shutdown has been triggered manually.Information4no
2102Network Restart Requested A network restart has been triggered manually using Barracuda NG Admin.Information 4no
2103

Activate New Network
Configuration

A new network configuration has been activated manually using Barracuda NG Admin.

Information 4no
2104

NGFW Subsystem Start 

The NGFW Subsystem (network and NGFW OS processes) has been started.Information 1no
2105NGFW Subsystem Stop

The NGFW Subsystem (network and NGFW OS processes) has been stopped.

Information 1no
2120Mail DSN Message Sent 

A DSN (Delivery Status Notification) message has been generated and sent by the mail gateway (for example due to undeliverable mail). Further DSN generation conditions are configurable in the Limits configuration section of the mail gateway (see: ).

Information

1no
2210Network Subsystem Restart

The network subsystem (routes, IP addresses, network interface drivers) has been restarted.

Information1no
2212

Unclean Network Subsystem
Activation

An error has occurred during network subsystem activation.Warning1no
2220Network Subsystem Shutdown

The network subsystem (routes, IP addresses, network interface drivers) has been shut down.

Information1no
2222

Unclean Network Subsystem
Shutdown

An error has occurred during network subsystem shutdown.Information1no
2230

Network Subsystem Check

The network subsystem configuration has been checked for consistency.Information1no
2232Network Subsystem Check The network subsystem configuration has been checked for consistency.Information1no
2234

Network Subsystem Check Failed

An error has been discovered during network subsystem configuration check.

Warning 1no
2240Link Activation Failed 

Activation of a dynamic link (for example xDSL, UMTS, DHCP) has failed. The reason for activation failure is provided in the event message.

Error  1no
2242Sublink Activation FailedSee description.Error  1no
2250PCMCIA Bus Reset

Resetting the PCMCIA bus to recover from potential modem lockup by power cycling it.

Error  1no
2380

Flawed Configuration Data
Activation

The rule file containing the domain settings of the mail gateway service is either missing or a corrupt rule file has been loaded. This event is only reported when parameter Bad Rulefile Loaded (see: ) is set to yes.

Error 1no
2500

FW Forwarding Loop Suppressed

These events are triggered when the firewall engine delivers a local targeted session from the local firewall to the forwarding firewall (because of a non existing local listening socket) and in the forwarding firewall a rule matches that does not perform DNAT.

Information

1no
2502

FW Local Redirection Suppressed

Information

1no
2511

FW Worker Limit Exceeded 

See description.Error  1yes
3000

VPN Server Tunnel Terminated

The VPN peer IP address and/or gateway is unavailable or the VPN tunnel has been terminated manually.Information 1no
3001

VPN Alternative Tunnel Activated

A VPN alternative tunnel will be activated, when the active partner of the tunnel changes his Bind-IP address (for example provider failure).

Warning1no
3002

VPN Server Tunnel Activated

A VPN Site-to-Site tunnel has been activated.

Information

1no
3003activation of on- demand tunnelA on-demand VPN Site-to-Site tunnel has been activated.Notice 1no
3004

deactivation of on-demand tunnel

A on-demand VPN Site-to-Site tunnel has been activated. 

Notice 1no
Last updated on