Fidelis Network Common Criteria Configuration Guide Version 9.0.3
17
www.fidelissecurity.com
SFR
Event
Additional
Information
Sample Log
192.168.42.5
FTP_ITC.1
Initiation of the
trusted channel.
Identification
of the initiator
Mar 17 09:50:25 10.42.209.241 syslog-
ng[26996] : Syslog connection
established; fd=’10’,
server=’AF_INET(10.42.213.205:6514)’ ,
local=’ AF_INET(0.0.0.0:0)’
Termination of the
trusted channel.
None
Mar 17 10:17:37 10.42.209.241 syslog-
ng[28959] syslog-ng shutting down;
version=’3.7.3’
Failure of the trusted
channel functions.
Target of
failed trusted
channels
establishment
attempt
Mar 17 09:50:15 10.42.209.241 syslog-
ng[26996] : Syslog connection failed;
fd=’10’,
server=’AF_INET(10.42.213.205:6514)’ ,
error=’Connection refused (111)’,
time_reopen=’10’
FTP_TRP.1/
Admin
Initiation of the
trusted channel.
Identification
of the claimed
user identity.
Mar 17 09:52:00 10.42.209.241 FSS:
audit: admin logged on from
10.42.29.155
Termination of the
trusted channel.
Identification
of the claimed
user identity.
Mar 17 10:00:07 10.42.209.241 FSS:
audit: admin logged out from
10.42.209.241
Failure of the trusted
channel functions.
Identification
of the claimed
user identity.
Mar 17 10:01:51 10.42.209.241 FSS:
audit: admin failed attempt to login from
10.42.209.155 (calling: login)
Component Processes and Descriptions
The table below lists all Fidelis Network processes that handle network traffic.
Table 3. Traffic Handling Processes and Descriptions
Component
Process Name
Privilege
Description
All
sshd
Runs as root
Secure shell daemon for remote
access
All
rconfigd
Runs as root
Serves as the Remote
Configuration Daemon that is
required for communication
between components
