Support Center > Search Results > SecureKnowledge Details
/var/log/messages file on Security Gateway shows that "show interfaces" command was executed during policy installation
Symptoms
  • During policy installation, /var/log/messages file on Security Gateway shows the following Gaia Clish auditlog entries:

    clish[PID]: user logged from admin 
    ... ... ... 
    clish[PID]: User admin logged in with ReadWrite permission 
    clish[PID]: cmd by admin: Start executing : show interfaces ... (cmd md5: XXX) 
    clish[PID]: cmd by admin: Processing : show interfaces all (cmd md5: XXX) 
    ... ... ... 
    clish[PID]: User admin logged out from CLI shell 
    
Cause

Gaia OS queries and parses the configuration of VTI interfaces to populate the required data in VPND daemon and in VPN kernel.


Solution
Note: To view this solution you need to Sign In .