It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda NextGen Firewall X

This Product is End-of-Life and End-Of-Support

End-Of-Life and End-Of-Support on December 1st, 2020: All Barracuda Firewall X-Series sales will cease; neither new sales nor any renewals will be available. If you currently hold a maintenance and support contract, you will continue to receive our award-winning support and services until your contract expires. Please see the End-Of-Life definition as described in the End of Support and End of Life Information.

Viewing Logs

  • Last updated on

From the LOGS tab, there are a number of log files that you can view to monitor and troubleshoot the Barracuda NextGen Firewall X-Series:

For all of these logs, click Help for a description of the information on the page.

Firewall Log

The Firewall Log displays firewall activity such as rules that have been executed and traffic that has been dropped. It lists all connections on the X-Series Firewall. You can filter the log by criteria such as a source IP address or network, or the time that the connections occurred.

HTTP Log

The HTTP Log displays the activities of the X-Series Firewalls connection with the Barracuda Web Security Service. There are several codes in the log. For details on these codes, see the HTTP Log Codes Overview section.

Network Log

Use the Network Log to investigate why network configuration changes are not working properly or cannot be activated.

The messages in the Network Log might explain the problem. If not, check the network configuration again for any problems or conflicts.

VPN Log

The VPN Log displays information for all client-to-site and site-to-site VPN tunnels. Use this log to investigate why VPN tunnels and PPTP connections are disconnecting or not being established.

To see the messages for specific VPN connections, you can also filter the log by IP addresses.

Service Log

The Service Log lists specific errors and warnings for services that are not configured properly or are encountering problems. To restart these services and debug any problems, you might need to contact Barracuda Networks Technical Support for assistance.

Authentication Log

The Authentication Log displays messages from the authentication service. This includes logins for the web interface and messages from the various authentication methods.

For example, if a client is not able to access a service, the unsuccessful authentications are written into the log. Successful authentications are also recorded. 

HTTP Log Codes Overview

The following tables provide details on the codes that you might see on the LOGS > HTTP Log page.

TCP Codes

TCP_" refers to requests on the HTTP port (3128)

Code

Description

TCP_HIT

A valid copy of the requested object was in the cache.

TCP_MISS

The requested object was not in the cache.

TCP_REFRESH_HIT

An expired copy of the requested object was in the cache. Squid made an If-Modified-Since request and the response was "Not Modified."

TCP_REFRESH_FAIL_HIT

An expired copy of the requested object was in the cache. Squid attempted to make an If-Modified-Since request, but it failed. The old (stale) object was delivered to the client.

TCP_REFRESH_MISS

An expired copy of the requested object was in the cache. Squid made an If-Modified-Since request and received a new object.

TCP_CLIENT_REFRESH

The client issued a request with the "no-cache" pragma. ("reload" - handled as MISS)

TCP_IMS_HIT

An If-Modified-Since GET request was received from the client. A valid copy of the object was in the cache (fresh).

TCP_IMS_MISS

An If-Modified-Since GET request was received from the client. The requested object was not in the cache (stale).

TCP_SWAPFAIL

The object was believed to be in the cache, but could not be accessed.

TCP_DENIED

Access was denied for this request.

ERR Codes

Error

Description

ERR_READ_TIMEOUT

The remote site or network is unreachable; it may be down.

ERR_LIFETIME_EXP

The remote site or network may be too slow or down.

ERR_NO_CLIENTS_BIG_OBJ

All clients went away before transmission completed and the object is too big to cache.

ERR_READ_ERROR

The remote site or network may be down.

ERR_CLIENT_ABORT

Client dropped connection before transmission completed. Squid fetches the Object according to its settings for `quick_abort'.

ERR_CONNECT_FAIL

The remote site or server may be down.

ERR_INVALID_REQ

Invalid HTTP request.

ERR_UNSUP_REQ

Unsupported request.

ERR_INVALID_URL

Invalid URL syntax.

ERR_NO_FDS

Out of file descriptors.

ERR_DNS_FAIL

DNS name lookup failure.

ERR_NOT_IMPLEMENTED

Protocol not supported.

ERR_CANNOT_FETCH

The requested URL cannot currently be retrieved.

ERR_NO_RELAY

There is no WAIS relay host defined for this cache.

ERR_DISK_IO

The system disk is out of space or failing.

ERR_ZERO_SIZE_OBJECT

The remote server closed the connection before sending any data.

ERR_FTP_DISABLED

This cache is not configured to retrieve FTP objects.

ERR_PROXY_DENIED

Access denied. Users must be authenticated before accessing this cache.