/var/log/messages file on Security Gateway shows that "show interfaces" command was executed during policy installation

Support Center > Search Results > SecureKnowledge Details

/var/log/messages file on Security Gateway shows that "show interfaces" command was executed during policy installation

Technical Level

Solution ID	sk107203
Technical Level
Product	Quantum Security Gateways, ClusterXL, Cluster - 3rd party
Version	R75.40 (EOL), R75.40VS (EOL), R75.45 (EOL), R75.46 (EOL), R75.47 (EOL), R76 (EOL), R77 (EOL), R77.10 (EOL), R77.20, R77.30 (EOL)
OS	Gaia
Platform / Model	All
Date Created	06-Aug-2015
Last Modified	09-Aug-2015

Symptoms

During policy installation, /var/log/messages file on Security Gateway shows the following Gaia Clish auditlog entries:

clish[PID]: user logged from admin 
... ... ... 
clish[PID]: User admin logged in with ReadWrite permission 
clish[PID]: cmd by admin: Start executing : show interfaces ... (cmd md5: XXX) 
clish[PID]: cmd by admin: Processing : show interfaces all (cmd md5: XXX) 
... ... ... 
clish[PID]: User admin logged out from CLI shell

Cause

Gaia OS queries and parses the configuration of VTI interfaces to populate the required data in VPND daemon and in VPN kernel.

Solution

Note: To view this solution you need to Sign In .