fortigate02-防火墻策略(完整版)
【正文】 id=FG3K6A3406600033 log_id=0106038002 type=event subtype=auth pri=warning vd=VDB user= service=HTTP action=authenticate status=timeout reason=timeout src= srame=N/A dst= dstname=N/A msg=User failed to authenticate within the allowed period ? 長時間停留在認證頁 認證超時 ? 與 config system global set authkeepalive enable Debug：用戶認證狀態(tài) ? diagnose firewall auth list（可過濾） FG3600A1 (VDB) diagnose firewall auth list policy id: 1, src: , action: accept, timeout: 140 user: user2, group: group2 flag (80020): auth timeout_ext, flag2 (0): group id: 2, av group: 0 policy id: 1, src: , action: accept, timeout: 57 user: user1, group: group1 flag (80020): auth timeout_ext, flag2 (0): group id: 1, av group: 0 2 listed, 0 filtered FG3600A1 (VDB) diagnose firewall auth filter group group1 FG3600A1 (VDB) diagnose firewall auth list policy id: 1, src: , action: accept, timeout: 19 user: user1, group: group1 flag (80020): auth timeout_ext, flag2 (0): group id: 1, av group: 0 1 listed, 1 filtered FG3600A1 (VDB) diagnose firewall auth filter clear clear all filters group group name method method policy policy id source source ip address user user name FG3600A1 (VDB) diagnose firewall auth filter FG3600A1 (VDB) diagnose firewall auth filter method method valid method name: fw, fsae, ntlm 重要提示： debug過濾也可以作用于 39。 意味著可以有選擇的刪除用戶認證狀態(tài)！ Debug：防火墻會話 ? 有認證的會話將有更多的信息 session info: proto=6 proto_state=11 expire=3588 timeout=3600 flags=00000000 sockflag=00000000 sockport=80 av_idx=0 use=5 originshaper= replyshaper= ha_id=0 hakey=58157 policy_dir=0 tunnel=/ user=user2 group=group2 state=redir local may_dirty authed rem statistic(bytes/packets/allow_err): =4876/20/1 reply=5642/11/1 tuples=3 insink: prepost, reply prepost dev=89/98 gwy=hook=post dir= act=snat :1095:80(:38595) hook=pre dir=reply act=dnat :80:38595(:1095) hook=post dir=reply act=noop :80:1095(:0) pos/(before,after) 0/(0,0), 0/(0,0) misc=20212 policy_id=1 auth_info=2 chk_client_info=0 vd=4 serial=0000072b tos=ff/ff app=0 dd_type=0 dd_rule_id=0 Debug : authd, fnbamd ? 當用戶在 Web登錄頁面成功認證后 …… FG3600A1 (global) message_loop: checking timeouts :792 authd__read: called :1671 authd__wait_credential: called :262 authd__read__message: called :218 authd__is_full__message: called :2277 authd__change_state: called change state to: 15 :2053 authd__wait_auth: called :511 authd_fnbam_auth_user: called authd_fnbam_auth_user: username=user2, policy_id=1 authd_fnbam_locked_out: username=user2, src_addr=, n_failures=0, record_ttl=14244 user2(group2) authentication successful: grp_info=2 av_info=0, av_grp=0 timeout=300 :1381 authd__authenticatio
環(huán)評公示相關(guān)推薦
鄂ICP備17016276號-1