How does an event log looks like for failed and success management proxy login.

Products

• ISG Proxy
• ProxySG Software - SGOS

Issue/Introduction

There are two methods to access the proxy management console, either through the GUI or CLI.

The event log able to logged both the failure and success of those logins.

Resolution

Below is an example on how the event log will look like for the failed and success login.

 

For the Web GUI access:

When failed:
2022-08-23 23:32:36-00:00UTC  "Administrator login from 10.0.200.20, user 'admin', denied: Authorization failure, request='/Secure/Local/console'"  11 250017:96  authconsole.cpp:898

When success:
2022-08-23 23:32:45-00:00UTC  "Administrator login, session_id 1, user 'admin', from 10.0.200.20, read-write access, request='/Secure/Local/console/MCApplet.html'"  0 250047:96  authconsole.cpp:818

 

For the SSH/CLI access:

When failed:
2022-08-23 23:35:01-00:00UTC  "SSH: Failed, login-authentication "password", user "admin", realm "", from 10.0.200.20, port "49891", protocol "ssh2" "  0 45000C:96  sgos_log.cpp:150

When success:
2022-08-23 23:35:22-00:00UTC  "SSH: Accepted, login-authentication "password", user "admin", realm "local", from 10.0.200.20, port "49891", protocol "ssh2" "  0 45000C:96  sgos_log.cpp:150