ZyXEL Communications ZYWALL USG 20 Manual page 762

Appendix A Log Descriptions
Table 246 myZyXEL.com Logs (continued)
LOG MESSAGE
Content-Filter
service has expired.
Unknown TLS/SSL
version: %d.
Load trusted root
certificates has
failed.
Certificate has
expired.
Self signed
certificate.
Self signed
certificate in
certificate chain.
Verify peer
certificates has
succeeded.
Certification
verification failed:
Depth: %d, Error
Number(%d):%s.
Certificate issuer
name:%s.
The wrong format for
HTTP header.
Timeout for get server
response.
Download file size is
wrong.
Parse HTTP header has
failed.
Table 247 IKE Logs
LOG MESSAGE
Peer has not announced
DPD capability
[COOKIE] Invalid
cookie, no sa found
762
DESCRIPTION
The content filtering service period has expired. The device
can find this through either a service expiration day check via
MyZyXEL.com server or by the device's own count.
The device only supports SSLv3 protocol. %d: SSL version
assigned by client.
The device needs to load the trusted root certificate before
the device can verify a server's certificate. This log displays if
the device failed to load it.
Verification of a server's certificate failed because it has
expired.
Verification of a server's certificate failed because it is self-
signed.
Verification of a server's certificate failed because there is a
self-signed certificate in the server's certificate chain.
The device verified a server's certificate while processing an
HTTPS connection.
Verification of a server's certificate failed while processing an
HTTPS connection. This log identifies the reason for the
failure.
1st %d: certificate chain level
2nd %d: error number
%s: error message
Verification of the specified certificate failed because the
device could not get the certificate's issuer name. %s is the
certificate name.
The header format of a packet returned by a server is wrong.
After the device sent packets to a server, the device did not
receive any response from the server. The root cause may be
a network delay issue.
The file size downloaded for AS is not identical with content-
length
Device can't parse the HTTP header in a response returned by
a server. Maybe some HTTP headers are missing.
DESCRIPTION
The remote IPSec router has not announced its dead peer
detection (DPD) capability to this device.
Cannot find SA according to the cookie.
ZyWALL USG 20/20W User's Guide