Fortinet black logo

Log Message Reference

11004002

Copy Link
Copy Doc ID a10d0919-b701-11ec-9fd1-fa163e15d75b:395613
Download PDF

11004002

Meaning

FortiWeb failed to connect to a website that you have configured to be monitored by the anti-defacement feature. Therefore it could not determine whether or not the website has been defaced.

Solution

If anti-defacement could not connect to the website:

Verify the login and IP address that you provided.

On the web server, check the file system permissions for the account that FortiWeb is using to connect. (FortiWeb must be able to both read and, if it will be restoring files, write to the folder and files.

On Microsoft Windows, you may need to examine your security policy configuration to make sure that the account is authenticating as itself, and is not degrading to the guest account.)

Verify that a route exists between the FortiWeb and the web server, and that connectivity is reliable, with no packet loss.

Verify that any routers or firewalls between the appliance and the server, including Windows Firewall, are not blocking SSH, FTP, or CIFS connections.

Other troubleshooting varies by the protocol that FortiWeb is using to connect, such as checking for a compatible protocol version and cipher suite.

Field name Description

ID

(log_id)

11004002

See Log ID numbers.

Sub Type

(subtype)

admin

See Subtypes.

Level

(pri)

warning

See Priority level.

User Interface

(ui)

anti-defacement

Action

(action)

monitor

Status

(status)

alert

Message

(msg)

Fail to connect to website <anti-defacement_name> (host is <server_ipv4>)

Examples

date=2012-02-13 time=18:49:09 log_id=00032901 msg_id=000015400628 type=event subtype="admin" pri=warning device_id=FV-1KC3R08600008 vd="root" timezone="(GMT+8:00)Beijing,ChongQing,HongKong,Urumgi" ui=anti-defacement action=monitor status=alert reason=filechange msg="Fail to connect to website www.example.com (host is 10.0.0.1)"

11004002

Meaning

FortiWeb failed to connect to a website that you have configured to be monitored by the anti-defacement feature. Therefore it could not determine whether or not the website has been defaced.

Solution

If anti-defacement could not connect to the website:

Verify the login and IP address that you provided.

On the web server, check the file system permissions for the account that FortiWeb is using to connect. (FortiWeb must be able to both read and, if it will be restoring files, write to the folder and files.

On Microsoft Windows, you may need to examine your security policy configuration to make sure that the account is authenticating as itself, and is not degrading to the guest account.)

Verify that a route exists between the FortiWeb and the web server, and that connectivity is reliable, with no packet loss.

Verify that any routers or firewalls between the appliance and the server, including Windows Firewall, are not blocking SSH, FTP, or CIFS connections.

Other troubleshooting varies by the protocol that FortiWeb is using to connect, such as checking for a compatible protocol version and cipher suite.

Field name Description

ID

(log_id)

11004002

See Log ID numbers.

Sub Type

(subtype)

admin

See Subtypes.

Level

(pri)

warning

See Priority level.

User Interface

(ui)

anti-defacement

Action

(action)

monitor

Status

(status)

alert

Message

(msg)

Fail to connect to website <anti-defacement_name> (host is <server_ipv4>)

Examples

date=2012-02-13 time=18:49:09 log_id=00032901 msg_id=000015400628 type=event subtype="admin" pri=warning device_id=FV-1KC3R08600008 vd="root" timezone="(GMT+8:00)Beijing,ChongQing,HongKong,Urumgi" ui=anti-defacement action=monitor status=alert reason=filechange msg="Fail to connect to website www.example.com (host is 10.0.0.1)"