Go Up

Object Types and Attributes Monitored on Juniper Devices

Review a full list of object types Netwrix Auditor can collect on Juniper network devices.

Object type Actions Event ID

Logon

  • Successful logon
  • LOGIN_INFORMATION

  • Accepted keyboard-interactive/pam

  • WEB_AUTH_SUCCESS

  • JADE_AUTH_SUCCESS

  • Failed logon
  • LOGIN_FAILED

  • SSHD_LOGIN_FAILED

  • LIBJNX_LOGIN_ACCOUNT_LOCKED
  • WEB_AUTH_FAIL

  • JADE_AUTH_FAILURE

Authentication

  • Successful Logon
  • FWAUTH_WEBAUTH_SUCCESS
  • FWAUTH_HTTP_USER_AUTH_ACCEPTED

  • FWAUTH_FTP_USER_AUTH_ACCEPTED
  • FWAUTH_TELNET_USER_AUTH_ACCEPTED

  • DYNAMIC_VPN_AUTH_OK
  • Failed logon
  • FWAUTH_WEBAUTH_FAIL
  • FWAUTH_HTTP_USER_AUTH_FAIL

  • FWAUTH_FTP_USER_AUTH_FAIL
  • FWAUTH_TELNET_USER_AUTH_FAIL

  • DYNAMIC_VPN_AUTH_FAIL

Configuration

  • Modified / Modify (Failed attempt)
  • UI_FACTORY_OPERATION
  • UI_INITIALSETUP_OPERATION

  • UI_RESCUE_OPERATION

  • UI_LOAD_EVENT

  • UI_CFG_AUDIT_OTHER

  • UI_CFG_AUDIT_SET:

  • UI_CFG_AUDIT_NEW

  • UI_CFG_AUDIT_SET_SECRET

  • UI_COMMIT:

  • UI_COMMIT_PROGRESS

  • UI_COMMIT_COMPLETED

  • UI_COMMIT_AT_COMPLETED

  • UI_COMMIT_NOT_CONFIRMED

  • UI_COMMIT_CONFIRMED_REMINDER

  • UI_COMMIT_AT_ABORT

  • UI_COMMIT_AT_FAILED

  • UI_COMMIT_COMPRESS_FAILED

  • UI_COMMIT_ROLLBACK_FAILED

Rule

  • Activated
  • RT_SCREEN_ICMP
  • RT_SCREEN_IP

  • RT_SCREEN_TCP

  • RT_SCREEN_TCP_DST_IP

  • RT_SCREEN_TCP_SRC_IP

  • RT_SCREEN_UDP

  • AV_VIRUS_DETECTED_MT

  • ANTISPAM_SPAM_DETECTED_MT

  • IDP_APPDDOS_APP_ATTACK_EVENT

  • IDP_APPDDOS_APP_STATE_EVENT

  • IDP_ATTACK_LOG_EVENT

Go Up