Cisco ASA Connections Over 50000 And Not An ASA5516

Network Sensor Monitoring

.

notes
Firewall Sensor Monitoring

.

Configuration

severity

warning

Rule Query

sql SELECT * FROM devices,ciscoASA WHERE (devices.device_id = ? AND devices.device_id = ciscoASA.device_id) AND (devices.status = 1 (devices.disabled = 0 devices.ignore = 0)) = 1 AND devices.os = asa AND ciscoASA.data > 50000 AND devices.hardware != ASA5516


Last modified January 27, 2024