Cisco ASA Connections Over 50000 And Not An ASA5516
Network Sensor Monitoring
.
notes
Firewall Sensor Monitoring
.
Configuration
severity
warning
Rule Query
sql SELECT * FROM devices,ciscoASA WHERE (devices.device_id = ? AND devices.device_id = ciscoASA.device_id) AND (devices.status = 1 (devices.disabled = 0 devices.ignore = 0)) = 1 AND devices.os = asa AND ciscoASA.data > 50000 AND devices.hardware != ASA5516
Last modified
January 27, 2024