Go Up
You are here: AdministrationMonitored Object Types, Actions, and AttributesNetwork DevicesObject Types and Attributes Monitored on Cisco Devices

Object Types and Attributes Monitored on Cisco Devices

Review a full list of object types Netwrix Auditor can collect on Cisco network devices.

 

Object type Actions Event ID
Cisco ASA devices

Authentication

  • Successful logon
  • 716038
  • 611101

  • 113012
  • Failed logon
  • 716039

  • 611102
  • 113021

  • 113020
  • 113015
  • 109031
  • 109025
  • 109024
  • 109022
  • 109017
  • 109010
  • 109008
  • 109006
  • 107001
  • 107002

Configuration
  • Modified / Modify (Failed attempt)
  • 111004
  • 111010
  • 612001

  • 612002
  • 612003

  • Read / Read (Failed attempt)
  • 111007
  • Removed / Remove (Failed attempt)
  • 111003
  • 112001

  • 208005

CPU

  • Modified / Modify (Failed attempt)
  • 211003

Device state

  • Modified / Modify (Failed attempt)
  • 199009

Environment (IPMI)

  • Modified / Modify (Failed attempt)
  • 735002
  • 735004

  • 735006
  • 735007

  • 735008
  • 735012

  • 735014
  • 735016

  • 735018
  • 735019

  • 735022
  • 735023

  • 735025
  • 735027

  • 735028
  • 735029

GroupPolicy

  • Add / Added (Failed attempt)
  • 502111
  • Removed / Remove (Failed attempt)
  • 502112

Logon

  • Successful logon
  • 605005
  • Failed logon
  • 308001
  • 605004

RAM

  • Modified / Modify (Failed attempt)
  • 211004

Session

  • Successful Logon
  • 716001
  • 713228

  • 722033
  • 722022

  • 725001
  • 725002

  • 725003
  • 606001

  • Logoff
  • 725007

  • 722023
  • 722030

  • 722031
  • 716002
  • 713259

  • 606002
  • 302014
  • 302304

  • 302016
  • Failed Logon
  • 722056
  • 725006

  • 725014

Rule

  • Activated
  • 733101

URL

  • Read / Read (Failed attempt)
  • 716003
  • 716004

User

  • Add / Added (Failed attempt)
  • 502101
  • Modified / Modify (Failed attempt)
  • 502103
  • 113006

  • 113007
  • Removed / Remove (Failed attempt)
  • 502102
Cisco IOS

Attribute

  • Read
  • INFO: AAA/ATTR

Authentication

  • Successful logon
  • IKEv2:
  • Failed logon
  • IKEv2-ERROR:

Configuration

  • Modified
  • CONFIG_I

Device state

  • Modified
  • UPDOWN
  • CHANGED

Environment

  • Modified
  • FAN_FAULT
  • OVER_TEMP

Logon

  • Successful logon
  • LOGIN_SUCCESS
  • Failed logon
  • LOGIN_FAILED

Session

  • Successful Logon
  • IKEv2:
  • Logoff
  • %FW-6-SESS_AUDIT_TRAIL
  • Failed Logon
  • IKEv2-ERROR:

Go Up