What is the PIX Message code for when the config or policy has been changed on a PIX firewall?
It could be 111002 or 111008 ,this code at least indicates the following:
Error Message %PIX-5-111002: Begin configuration: IP_address writing to device
Explanation This message is logged when you enter the write command to store your configuration on a device (either floppy, Flash memory, TFTP, the failover standby unit, or the console terminal). The IP_address indicates whether the login was made at the console port or via a Telnet connection.
Error Message %PIX-5-111008: User user executed the command string
Explanation This syslog message is for accounting purposes. The user entered a command that modified the configuration.