Fidelis Network Common Criteria Configuration Guide Version 9.0.3
12
www.fidelissecurity.com
SFR
Event
Additional
Information
Sample Log
FCS_TLSS_
EXT.2
Failure to establish a
TLS Session
TLS
endpoints
identification
(if applicable),
certificate
depth, Issuer,
Subject (if
applicable),
and reason
for failure
Aug 11 13:34:33 localhost FSS
audit[42996]: TLS ERROR: Local:
::ffff:10.89.184.31, Remote: ::ffff:10
.89.184.32, Certificate verification error
26 : unsupported certificate,
Aug 11 13:34:33 localhost Depth = 0,
Aug 11 13:34:33 localhost Issuer =
/C=US/ST=MD/L=Bethesda/O=Fidelis
Cybersecurity/OU=Research and De
velpoment/CN=Vadim-Fidelis-
RootCA1/emailAddress=VF-
[email protected],
Aug 11 13:34:33 localhost Subject =
/C=US/ST=MD/L=Bethesda/O=Fidelis
Cybersecurity/OU=Research and D
evelpoment/CN=VF-RCA1-
Server1/emailAddress=VF-RCA1-
[email protected]
Aug 11 13:34:33 localhost TLS ERROR:
Local: ::ffff:10.89.184.31, Remote:
::ffff:10.89.184.32, error:
140890B2:SSL
routines:SSL3_GET_CLIENT_CERTIFI
CATE:no certificate returned
FIA_AFL.1
Unsuccessful login
attempts limit is met
or exceeded.
Administrator
identity and
the origin of
the login
attempt (e.g.,
IP address).
Sep 8 11:26:18 localhost FSS
audit[106367]: k2admin failed attempt to
login from 10.89.184.30 (calling: login)
Sep 8 11:26:28 localhost FSS
audit[106480]: k2admin failed attempt 1
to login from 10.89.184.30 (calling: login)
Sep 8 11:26:35 localhost FSS
audit[106529]: k2admin failed attempt 2
to login from 10.89.184.30 (calling: login)
Sep 8 11:26:39 localhost FSS
audit[106560]: k2admin failed attempt 3
to login from 10.89.184.30 (calling: login,
3 unsuccessful login attempts detected)
Sep 8 11:53:58 localhost FSS
audit[116873]: k2admin failed attempt 4
to login from 10.89.184.30 (calling: login,
account disabled)
FIA_UIA_EX
T.1
All use of the
identification and
authentication
mechanism
Provided user
identity, origin
of the attempt
Remote:
Feb 18 13:03:14 10.42.209.241 FSS
audit: admin logged on from
192.168.42.5
Local:
