D-Link DFL-260E Log Reference Guide for DFL-260E - Page 474

2.48.43. disallow_clientkeyexchange (ID: 03700501) Chapter 2. Log Message Reference Gateway Action Recommended Action Revision Parameters ssl_close Make sure that the client and unit share atleast one cipher. 1 client_ip 2.48.43. disallow_clientkeyexchange (ID: 03700501) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters ERROR SSL Handshake: Disallow ClientKeyExchange. Closing down SSL connection The SSL connection will be closed because there are not enough resources to process any ClientKeyExchange messages at the moment. This could be a result of SSL handshake message flooding. This action is triggered by a system that monitors the amount of resources that is spent on key exchanges. This system is controlled by the advanced setting SSL_ProcessingPriority. ssl_close Investigate the source of this, and try to find out if it is a part of a possible attack, or normal traffic. 2 client_ip 2.48.44. bad_packet_order (ID: 03700502) Default Severity Log Message Explanation Gateway Action Recommended Action Revision Parameters ERROR Bad SSL Handshake packet order. Closing down SSL connection Two or more SSL Handshake message were received in the wrong order, and the SSL connection is closed. ssl_close None. 1 client_ip 2.48.45. bad_clienthello_msg (ID: 03700503) Default Severity Log Message Explanation ERROR SSL Handshake: Bad ClientHello message. Closing down SSL connection The ClientHello message (which is the first part of a SSL handshake) 474