Guide for Cisco PIX 6.2 and 6.3 Users Upgrading to Cisco PIX Software Version 7.0
Syslog Message Changes and Deletions

Table Of Contents

Syslog Message Changes and Deletions

Changed Syslog Messages

Deleted Syslog Messages


Syslog Message Changes and Deletions


This chapter includes the following topics:

Changed Syslog Messages

Deleted Syslog Messages

See the security appliance Cisco Security Appliance System Log Messages for more information.

Changed Syslog Messages

112001

Old Syslog Message: %PIX-2-112001: (string:dec) PIX Clear complete

New Syslog Message: %PIX-2-112001: Clear finished

Change Reason: The filename and line number (string:dec) are undesirable in a syslog message. The PIX keyword is removed to make the syslog platform independent.

199002

Old Syslog Message: %PIX-6-199002: PIX startup completed. Beginning operation

New Syslog Message: %PIX-6-199002: Startup completed. Beginning operation

Change Reason: The PIX keyword is removed from the body of the syslog message to make the syslog platform independent.

199005

Old Syslog Message: %PIX-6-199005: PIX Startup begin

New Syslog Message: %PIX-6-199005: Startup begin

Change Reason: The PIX keyword is removed from the body of the syslog message to make the syslog platform independent.

201002

Old Syslog Message: %PIX-3-201002: Too many connections on {static|xlate} global_address! econns nconns

New Syslog Message: %PIX-3-201002: Too many tcp connections on {static|xlate} global_address! econns nconns

Change Reason: This syslog is only applicable to TCP connection, hence the change.

208005

Old Syslog Message: %PIX-3-208005: (function:line_num) pix clear command return code

New Syslog Message: %PIX-3-208005: Clear command return

Change Reason: The filename and line number are undesirable in a syslog message. The PIX keyword is removed to make the syslog platform independent.

308001

Old Syslog Message: %PIX-6-308001: PIX console enable password incorrect for number tries (from IP_address)

New Syslog Message: %PIX-6-308001: Console enable password incorrect for number tries (from_IP address)

Change Reason: The PIX keyword is removed from the body of the syslog message to make the syslog platform independent.

315004

Old Syslog Message: %PIX-3-315004: Fail to establish SSH session because PIX RSA host key retrieval failed

New Syslog Message: %PIX-3-315004: Fail to establish SSH session because RSA host key retrieval failed.

Change Reason: The PIX keyword is removed from the body of the syslog message to make the syslog platform independent.

606001

Old Syslog Message: %PIX-6-606001: PDM session number number from IP_address started

New Syslog Message: %PIX-6-606001: ASDM session number number from IP_address started

Change Reason: The PDM keyword is changed to ASDM to update the syslog platform for ASDM.

606002

Old Syslog Message: %PIX-6-606002: PDM session number number from IP_address ended

New Syslog Message: %PIX-6-606002: ASDM session number number from IP_address ended

Change Reason: The PDM keyword is changed to ASDM to update the syslog platform for ASDM.

611314

Old Syslog Message: %PIX-6-611314: VPNClient: Load Balancing Cluster with Virtual IP: IP_address has redirected the PIX to server IP_address

New Syslog Message: %PIX-6-611314: VPNClient: Load Balancing Cluster with Virtual IP:%I has redirected firewall to server

Change Reason: The PIX keyword is removed to make the syslog platform independent.

Deleted Syslog Messages

103002

Old Syslog Message: %PIX-1-103002: (Primary) Other firewall network interface interface_number OK

Deletion Reason: This syslog was not produced by PIX Version 6.3, nor will it be produced by PIX Security appliance Version 7.0.

105031

Old Syslog Message: %PIX-1-105031: Failover LAN interface is up

Deletion Reason: Replaced by 105042.

105032

Old Syslog Message: %PIX-1-105032: LAN Failover interface is down

Deletion Reason: Replaced by 105043.

105034

Old Syslog Message: %PIX-1-105032: LAN Failover interface is down

Deletion Reason: Obsolete due to different implementation.

105035

Old Syslog Message: %PIX-1-105035: Receive a LAN failover interface down msg from peer.

Deletion Reason: Obsolete due to different implementation.

105036

Old Syslog Message: %PIX-1-105036: PIX dropped a LAN Failover command message.

Deletion Reason: Obsolete due to different implementation.

105037

Old Syslog Message: %PIX-1-105037: The primary and standby units are switching back and forth as the active unit.

Deletion Reason: Obsolete due to different implementation.

109013

Old Syslog Message: %PIX-3-109013: User must authenticate before using this service

Deletion Reason: This syslog not produced by PIX Version 6.3, nor will it be produced by PIX Security appliance Version 7.0.

109021

Old Syslog Message: %PIX-7-109021: Uauth null proxy error

Deletion Reason: No longer relevant in this release.

111006

Old Syslog Message: %PIX-6-309002: Permitted manager connection from IP_address.

Deletion Reason: Replaced by 605005 as per ICSA requirement.

210003

Old Syslog Message: %PIX-2-201003: Embryonic limit exceeded nconns/elimit for outside_address/outside_port (global_address) inside_address/inside_port on interface interface_name

Deletion Reason: Obsolete due to different implementation.

210010

Old Syslog Message: %PIX-3-210010: LU make UDP connection for outside_address:outside_port inside_address:inside_port failed

Deletion Reason: Obsolete due to different implementation.

210020

Old Syslog Message: %PIX-3-210020: LU PAT port port reserve failed

Deletion Reason: Obsolete due to different implementation.

210021

Old Syslog Message: %PIX-3-210021: LU create static xlate global_address ifc interface_name failed

Deletion Reason: Obsolete due to different implementation.

211003

Old Syslog Message: %PIX-3-211003: CPU utilization for number seconds = percent

Deletion Reason: This is an error condition in the code; it is no longer relevant.

215001

Old Syslog Message: %PIX-2-215001:Bad route_compress() call, sdb= number

Deletion Reason: The syslog number has changed to 216001.

302302

Old Syslog Message: %PIX-3-302302: ACL = deny; no sa created

Deletion Reason: The code containing this syslog changed dramatically; it is no longer relevant.

309002

Old Syslog Message: %PIX-6-309002: Permitted manager connection from IP_address

Deletion Reason: This is for PIX Firewall Management, which is no longer supported.

316001

Old Syslog Message: %PIX-2-316001: Denied new tunnel to IP_address. VPN peer limit

(platform_vpn_peer_limit) exceeded

Deletion Reason: This is not applicable in the current release, as SOHO devices are not supported by this release.

320001

Old Syslog Message: %PIX-3-320001: The subject name of the peer certificate is not allowed for connection

Deletion Reason: This has been replaced by more granular syslogs (from 713001 to 713224).

402101

Old Syslog Message: %PIX-4-402101: decaps: rec'd IPSEC packet has invalid spi for destaddr=dest_address, prot=protocol, spi=number

Deletion Reason: The code containing this syslog changed dramatically; it is no longer relevant.

402102

Old Syslog Message: %PIX-4-402102: decapsulate: packet missing {AH|ESP}, destadr=dest_address, actual prot=protocol

Deletion Reason: The code containing this syslog changed dramatically; it is no longer relevant.

402103

Old Syslog Message: %PIX-4-402103: identity doesn't match negotiated identity (ip) dest_address= dest_address, src_addr= source_address, prot= protocol, (ident) local=inside_address, remote=remote_address, local_proxy=IP_address/IP_address/port/port, remote_proxy=IP_address/IP_address/port/port

Deletion Reason: The code containing this syslog changed dramatically; it is no longer relevant.

403500

Old Syslog Message: %PIX-6-403500: PPPoE - Service name 'any' not received in PADO. Intf:interface_name AC:ac_name

Deletion Reason: PPPoE is not supported in the current release, customer would not see this syslog.

403501

Old Syslog Message: %PIX-3-403501: PPPoE - Bad host-unique in PADO - packet dropped Intf:interface_name AC:ac_name

Deletion Reason: PPPoE is not supported in the current release, hence customers would not see this syslog.

403502

Old Syslog Message: %PIX-3-403502: PPPoE - Bad host-unique in PADS - dropping packet. Intf:interface_name AC:ac_name

Deletion Reason: PPPoE is not supported in the current release, hence customers would not see this syslog.

404101

Old Syslog Message: %PIX-4-404101: ISAKMP: Failed to allocate address for client from pool string

Deletion Reason: This has been replaced by 713132.

407001

Old Syslog Message: %PIX-4-407001: Deny traffic for local-host interface_name:inside_address, license limit of number exceeded

Deletion Reason: This is not applicable in the current release.

501101

Old Syslog Message: %PIX-5-501101: User transitioning priv level

Deletion Reason: The code containing this syslog changed dramatically; it is no longer relevant.

602102

Old Syslog Message: %PIX-6-602102: Adjusting IPSec tunnel mtu...

Deletion Reason: The code containing this syslog changed dramatically; it is no longer relevant.

602201

Old Syslog Message: %PIX-6-602201: ISAKMP Phase 1 SA created (local <ip>/<port> (initiator|responder), remote <ip>/<port>, authentication=<auth_type>, encryption=<encr_alg>, hash=<hash_alg>, group=<DH_grp>, lifetime=<seconds>) Change Reason: Replaced by more granular syslog, look at 713xxx

Deletion Reason: This has been replaced by more granular syslogs (from 713001 to 713224).

602203

Old Syslog Message: PIX-6-602203: ISAKMP session disconnected (local <ip> (initiator|responder), remote <ip>)

Deletion Reason: This has been replaced by more granular syslogs (from 713001 to 713224).

602301

Old Syslog Message: %PIX-6-602301: sa created...

Deletion Reason: This has been replaced by syslogs 713119 and 713120.

602302

Old Syslog Message: %PIX-6-602302: deleting sa

Deletion Reason: This has been being replaced by 713113, 713169, 713170, 713194, 715009, 715052, 715067 and 715068.

603108

Old Syslog Message: %PIX-6-603108: Built PPTP Tunnel at interface_name, tunnel-id = number, remote-peer = IP_address, virtual-interface = number, client-dynamic-ip = IP_address, username = user, MPPE-key-strength = number

Deletion Reason: PPPoE is not supported in the current release, hence customers would not see this syslog.

702201

Old Syslog Message: %PIX-7-702201: ISAKMP Phase 1 delete received (local <ip> (initiator|responder), remote <ip>)

Deletion Reason: This has been replaced by more granular syslogs (from 713001 to 713224).

702202

Old Syslog Message: %PIX-7-702202: ISAKMP Phase 1 delete sent (local <ip> (initiator|responder), remote <ip>)

Deletion Reason: This has been replaced by more granular syslogs (from 713001 to 713224).

702203

Old Syslog Message: %PIX-7-702203: ISAKMP DPD timed out (local <ip> (initiator|responder), remote <ip>)

Deletion Reason: This has been replaced by more granular syslogs (from 713001 to 713224).

702204

Old Syslog Message: %PIX-7-702204: ISAKMP Phase 1 retransmission (local <ip> (initiator|responder), remote <ip>)

Deletion Reason: This has been replaced by more granular syslogs (from 713001 to 713224).

702205

Old Syslog Message: %PIX-7-702205: ISAKMP Phase 2 retransmission (local <ip> (initiator|responder), remote <ip>)

Deletion Reason: This has been replaced by more granular syslogs (from 713001 to 713224).

702206

Old Syslog Message: %PIX-7-702206: ISAKMP malformed payload received (local <ip> (initiator|responder), remote <ip>)

Deletion Reason: This has been replaced by more granular syslogs (from 713001 to 713224).

702207

Old Syslog Message: %PIX-7-702207: ISAKMP duplicate packet detected (local <ip> (initiator|responder), remote <ip>)

Deletion Reason: This has been replaced by more granular syslogs (from 713001 to 713224).

702208

Old Syslog Message: %PIX-7-702208: ISAKMP Phase 1 exchange started (local <ip> (initiator|responder), remote <ip>)

Deletion Reason: This has been replaced by more granular syslogs (from 713001 to 713224).

702209

Old Syslog Message: %PIX-7-702209: ISAKMP Phase 2 exchange started (local <ip> (initiator|responder), remote <ip>)

Deletion Reason: This has been replaced by more granular syslogs (from 713001 to 713224).

702210

Old Syslog Message: %PIX-7-702210: ISAKMP Phase 1 exchange completed(local <ip> (initiator|responder), remote <ip>)

Deletion Reason: This has been replaced by more granular syslogs (from 713001 to 713224).

702211

Old Syslog Message: %PIX-7-702211: ISAKMP Phase 2 exchange completed(local <ip> (initiator|responder), remote <ip>)

Deletion Reason: This has been replaced by more granular syslogs (from 713001 to 713224).

702212

Old Syslog Message: %PIX-7-702212: ISAKMP Phase 1 initiating rekey (local <ip> (initiator|responder), remote <ip>)

Deletion Reason: This has been replaced by more granular syslogs (from 713001 to 713224).

702301

Old Syslog Message: %PIX-7-702301: lifetime expiring...

Deletion Reason: Security associations do not expire in PIX Security appliance Version 7.0; this syslog is no longer relevant.

702302

Old Syslog Message: %PIX-3-702302: replay rollover detected...

Deletion Reason: The code containing this syslog changed dramatically; it is no longer relevant.

702303

Old Syslog Message: %PIX-7-702303: sa_request...

Deletion Reason: This syslog has been replaced by 713041, 713042, 713043 and 713176.

709002

Old Syslog Message: %PIX-7-709002: FO unreplicable: cmd=command

Deletion Reason: This syslog was intended to catch programming errors and is no longer needed because of code changes.