We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

Operational Events

  • Last updated on

The following article provides an overview of all operational events processed by the Barracuda NextGen Firewall F-Series.   

Event-ID Description Relevance Severity Notification Persistent
10  Disk Space Low 

On at least one partition, between 70% and 90% of available disk space is in use. Disk usage is graphically depicted in the CONTROL > Resources tab. Low disk space is characterized by a yellow status bar.

Warning  1 yes
11 Disk Space Critical

On at least one partition, more than 90% of available disk space is in use. Disk usage is graphically depicted in the CONTROL > Resources tab. Critical disk space is characterized by a red status bar.

Error

1 yes
20  Memory Low

Between 70% and 90% of available memory is in use. Memory usage is graphically depicted in the CONTROL > Resources tab. Low memory availability is characterized by a yellow status bar.

Warning

 
1 yes
21 Memory Critical

More than 90% of available memory is in use. Memory usage is graphically depicted in the CONTROL > Resources tab. Critical memory availability is characterized by a red status bar.

Error

 
1 yes
30 High System Load  

The "Warning" load warnings have been exceeded. Thresholds may be configured in the CONFIGURATION > Configuration Tree > Box > Infrastructure Services > Control > CPU-LOAD Monitoring section.

Warning  1 yes
31 Excessive System Load 

The "Critical" load warnings have been exceeded. Thresholds may be configured in the CONFIGURATION > Configuration Tree > Box > Infrastructure Services > Control > CPU-LOAD Monitoring section.

Error  1 yes
34 Critical System Condition  

The Watchdog repair binary could not be executed flawlessly (see: Watchdog; parameter Run S.M.A.R.T).

Error  1 yes
35

Power Outage

System power outage. Error  1 yes
36

Power Restored

System power has been restored. Information 1 yes
48 Device Mismatch

Network misconfiguration. Number of configured interfaces does not match number of physically available interfaces.

Error

1 no
49 Device Activation Failed A network interface could not be activated. Error  1 no
50 Device Down A network interface has been disabled.  Error 1 yes
51 IP Address Added

The control daemon has added a server IP to the network configuration (for example, after manual configuration changes, enabling a server, …).

Information

1 no
52

IP Address Removed

The control daemon has removed an existing server IP address from the network configuration (for example, after manual configuration changes, blocking or disabling a server, …). Information 1 no
55

Assigned IP Address Changed

An IP address that has been assigned to the system by a DHCP server has changed.

Information

1 no
56 Duplicate DHCP IP 

A DHCP server-assigned IP address living on the system has additionally been detected in the network.

Warning 1 no
57 Dyn DNS Update Succeeded

Successful DynDNS account update.

Information

1 no
58 Dyn DNS Update Failed   Failed DynDNS account update. Warning 1 no
60 Route Added

A route has been added to the active network configuration because, for example, an xDSL connection has been activated or a gateway has become available.

Information  4 no
61 Route Deleted

A route has been deleted from the system because, for example, a gateway has become unavailable.

Information 4 no
62

Route Changed

The state or a parameter of a route has changed.

Information

4 no
63

Route Enabled

A route has been activated because, for example, a server IP has been added to the configuration.

Information  4 no
64

Route Disabled

A route has been disabled because, for example, a server IP has been deleted from the configuration.

Information 4 no
65

Route Reactivated

See also Event-ID 66 Route Deactivated. A gateway route has been reactivated because the initial state has been restored.

Information

4 no
66

Route Deactivated

A gateway route has been deactivated because a former gateway IP has become a local IP on a Barracuda NextGen Firewall F-Series system. This event might occur on secondary HA boxes when the server IP of the primary box (former gateway IP for the secondary box) changes to the secondary box after HA takeover.

Information

4 no
70

Flash drive auto detection

The storage architecture option available in the box configuration file might have been misconfigured.

Error 1 no
80 USB Device is not connected The Barracuda 3G modem is not connected to the firewall. Warning 1 no
90 Module Error

An error occurred while loading or unloading network module drivers. See log for details.

Error 1 no
100

Missing Configuration File

A server or service configuration file cannot be retrieved. That means it might have been deleted.

Error 1 no
110

Missing Sysctrl

Missing sysctrl entry. See log for details.

Error 1 yes
120

Missing Executable

A binary needed at start-up could not be found.

Error

1 yes
131

Resource Missing

A resource needed for full system functionality is missing because, for example, a configured network interface is not available.

Error

1 no
135 Resource Limit Pending

Less than 50% of maximum command value remains (Successive Command Maximum).

Warning

1 yes
136 Resource Limit Exceeded  

The number of concurrent connections allowed to connect to a service or a configured maximum limit has reached a critical value or has been exceeded (for example, Parallel Connection Limit, Spooling Limit). The maximum command counter has been reached or has been exceeded (Successive Command Maximum).

 
Warning  1 yes
150 Corrupted Data File

The utility dstats has identified a corrupt data file.

Error 1 no
300 User ID (UID) Invalid Admin has been introduced with illegal UID. Check /etc/login.defs for setting of UID_MIN parameter. Security 3 no
304 Reserved Login ID Used Apple notification. Apple ID was used to sign in to a device. Security 3 no
400 Time Discontinuity Detected 

The statistics daemon has detected a time shift. That refers to a deviation from former time settings. For example, date/time settings have been changed manually, or hardware clock settings are incorrect after reboot.

Warning

1 no
500  Invalid License

The license installed on the system is invalid. For example, the hardware ID of the system does not match with the ID the license has been issued for, or the validity period has been exceeded.

Error

1 yes
501 No License Found No valid license found. Stopping module.

Error

1 yes
505 License Limit Exceeded

The license limit of IPs protected by the firewall has been exceeded.

 
 

Error

 1 no 
510

Invalid Argument 

 

The Watchdog repair binary could not be executed flawlessly (see: Watchdog).

 
 

Error

 1  no
600 HA Partner Unreachable 

Connectivity between a Barracuda NextGen Firewall F-Series and its high availability partner is disrupted.

Error

 
1 yes
610 Reporter SSH Host Key Mismatch The management reporter SSH host key does not match.  Error 1 yes
620

Box Unreachable

Connectivity between CC and one of its administered boxes is disrupted. This event is generated only on the CC.

Warning 1 yes
622

Box Reachable Again 

Connectivity between CC and one of its administered boxes has been restored. This event is generated only on the CC.

Information 1 no
666 

Process Core Found 

The core-search utility has found a core dump of a Barracuda NextGen Firewall F-Series process and has moved it to /var/phion/crash.

Warning 1 no
700 SIM Card Handling SIM card activity on firewall equipped with 3G USB modem. See log for details. Error 1 yes
701 SIM Card Handling SIM card activity on firewall equipped with 3G USB modem. See log for details. Warning 1 yes
702 3G Network Registration This event occurs if the Barracuda M10 modem dialed in successfully to a GSM network. Warning 1 yes
703 3G Network Registration 3G network registration on firewall equipped with 3G USB modem. Error 1 yes
704 Signal Strength 3G network signal strength on firewall equipped with 3G USB modem. Warning 1 yes
710 SMS Handling Status information of a Barracuda NextGen Firewall via SMS. See log for details. Error 1 yes
711 SMS Handling Status information of a Barracuda NextGen Firewall via SMS. See log for details. Warning 1 yes
721 SMS Handling Status information of a Barracuda NextGen Firewall via SMS. See log for details. Information 1 yes
2000 Start Server A server has been started either by the system or manually. Information 4 no
2001 Start Service  A service has been started either by the system or manually. Information 4 no
2002 Start Box Service A box service has been started either by the system or manually. Information 4 no
2010 Stop Server A server has been stopped either by the system or manually. Information 4 no
2011 Stop Service A service has been stopped either by the system or manually. Information 4 no
2012 Stop Box Service  A box service has been stopped either by the system or manually. Information 4 no
2020 Restart Server

A server has been restarted either by the system or manually.

Information

4 no
2021 Restart Service

A service has been restarted either by the system or manually.

Information

4 no
2022 Restart Box Service 

A box service has been restarted either by the system or manually. 

Information

4 no
2030 Block Server

A server has been blocked manually.

Information

4 no
2031 Block Service A service has been blocked manually. Information 4 no
2032 Block Box Service

A box service has been blocked manually.

Information  4 no
2040 Deactivate Server A virtual server has been deactivated. See log for details. Information 4 no
2041

Deactivate Service

A service has been deactivated. See log for details.

Information

4 no
2042

Deactivate Box Service 

A box service has been deactivated. See log for details.

Information 4 no
2044

No Valid License for Service

A service is missing a valid license. See log for details.

Warning  1 yes
2045 Entering GRACE Mode 

A system with a formerly valid license has changed into GRACE mode, either because the host key the license has been issued for does not match with the system’s host key or because the CC-administered box could not validate its license with the CC.

Warning

1 no
2046 Entering DEMO Mode The system has been installed without importing a valid license, or a valid box license has been removed from it. Error 1 no
2047 GRACE Mode Expired GRACE mode has expired.  Error 1 no
2050 Reactivate Server  A virtual server has been reactivated. See log for details. Information 4 no
2051 Reactivate Service A service has been reactivated. See log for details. Information 4 no
2052 Reactivate Box Service  A box service has been reactivated. See log for details. Information 4 no
2054 Subprocess Kill Requested   A sub-process has been killed manually.  Information 1 no
2056 Connection Kill Requested 

A firewall connection termination has been forced. See log for details.

Information 1 no
2058 Session Kill Requested  A session kill has been requested by a Barracuda Firewall Admin user. See log for details. Information 1 no
2060 Emergency Server Start

A server has started because the HA partner is not available.

Warning  1 no
2061 Emergency Server Stop

A server has stopped because the HA partner server is in an active state.

Warning  1 no
2070 Daemon Startup Failed 

A daemon’s startup/shutdown has failed/succeeded. The daemon responsible for the event will be included in the event message. Eventing notifications may be configured per daemon (for example NTPd). They will only be generated for controlled startup/shutdown sequences and not for manual process terminations.





Warning  1 no
2071 Daemon Startup Succeeded Information  1 no
2072 Daemon Shutdown Failed Information 1 no
2073 Daemon Shutdown Succeeded Information 1 no
2080

Time Synchronization Failed 

NTP sync with the configured NTP server has failed. NTP synchronization settings are defined in CONFIGURATION > Configuration Tree > Box > Administrative Settings > TIME Settings/NTP.

Warning

 
1 no
2081

Time Synchronization
Succeeded

 

NTP sync with the configured NTP server has succeeded. NTP synchronization settings are defined in CONFIGURATION > Configuration Tree > Box > Administrative Settings > TIME Settings/NTP.

Information

 
1 no
2082 Time Synchronization Denied 

NTP sync with the configured NTP server has been denied. NTP synchronization settings are defined in CONFIGURATION > Configuration Tree > Box > Administrative Settings > TIME Settings/NTP.

Error

1 no
2099 CTRL-ALT-DEL 

A system reboot has been triggered manually at the physical console by pressing the keys CTRL-ALT-DEL simultaneously.

Information 4 no
2100 Reboot Requested  A system reboot has been triggered manually using Barracuda NextGen Admin.  Information 4 no
2101 System Halt Requested  A system shutdown has been triggered manually. Information 4 no
2102 Network Restart Requested  A network restart has been triggered manually using Barracuda NextGen Admin. Information  4 no
2103

Activate New Network
Configuration

A new network configuration has been activated manually using Barracuda NextGen Admin.

Information  4 no
2104

NG Firewall Start 

The NGFW subsystem (network and NGFW OS processes) has been started. Information  1 no
2105 NG Firewall Stop

The NGFW subsystem (network and NGFW OS processes) has been stopped.

Information  1 no
2120 Mail DSN Message Sent 

A DSN (Delivery Status Notification) message has been generated and sent by the mail gateway (for example, due to undeliverable mail). Further DSN generation conditions are configurable in the Limits configuration section of the mail gateway.

Information

1 no
2210 Network Subsystem Restart

The network subsystem (routes, IP addresses, network interface drivers) has been restarted.

Information 1 no
2212

Unclean Network Subsystem
Activation

An error has occurred during network subsystem activation. Warning 1 no
2220 Network Subsystem Shutdown

The network subsystem (routes, IP addresses, network interface drivers) has been shut down.

Information 1 no
2222

Unclean Network Subsystem
Shutdown

An error has occurred during network subsystem shutdown. Information 1 no
2230

Network Subsystem Check

The network subsystem configuration has been checked for consistency. Information 1 no
2232 Network Subsystem Check  The network subsystem configuration has been checked for consistency. Information 1 no
2234

Network Subsystem Check Failed

An error has been discovered during network subsystem configuration check.

Warning  1 no
2240 Link Activation Failed 

Activation of a dynamic link (for example, xDSL, WWAN, or DHCP) has failed. The reason for activation failure is provided in the event message.

Error   1 no
2242 Sublink Activation Failed Activation of a dynamic network subsystem (e.g., DHCP, UMTS or DSL) failed. See log for details. Error   1 no
2250 PCMCIA Bus Reset

Resetting the PCMCIA bus to recover from potential modem lockup by power cycling it.

Error   1 no
2380

Flawed Configuration Data
Activation

The rule file containing the domain settings of the mail gateway service is either missing or a corrupt rule file has been loaded. This event is only reported when parameter Bad Rulefile Loaded is set to yes.

Error  1 no
2500

FW Forwarding Loop Suppressed

These events are triggered when the firewall engine delivers a local targeted session from the local firewall to the forwarding firewall (because of a non-existing local listening socket), and in the forwarding firewall a rule matches that does not perform DNAT.

Information

1 no
2502

FW Local Redirection Suppressed

Information

1 no
2511 FW Worker Limit Exceeded Firewall worker limit has exceeded the maximum value. See log for details. Error   1 yes
3001 VPN Alternative Tunnel Activated A VPN alternative tunnel will be activated when the active partner of the tunnel changes its bind-IP address (for example, provider failure). Warning 1 no
3003 VPN Server Tunnel Terminated The VPN peer IP address and/or gateway is unavailable, or the VPN tunnel has been terminated manually. Information 1 no
3004 VPN Server Tunnel Activated A VPN site-to-site tunnel has been activated. Information 1 no
Last updated on