An investigator is checking a Cisco firewall log that reads as follows:
Aug 21 2019 09:16:44: %ASA-1 -106021: Deny ICMP reverse path check from 10.0.0.44 to 10.0.0.33 on interface outside
What does %ASA-1-106021 denote?
An investigator is checking a Cisco firewall log that reads as follows:
Aug 21 2019 09:16:44: %ASA-1 -106021: Deny ICMP reverse path check from 10.0.0.44 to 10.0.0.33 on interface outside
What does %ASA-1-106021 denote?
In a Cisco firewall log, the %ASA-1-106021 part represents a Mnemonic message. %ASA refers to the Cisco Adaptive Security Appliance, 1 denotes the severity level, and 106021 is the specific code for the log message. This code helps in identifying the nature of the logged event or action.
B < https://networkengineer.me/2018/05/14/what-is-syslog-on-asa/
In Cisco firewall logs, the %ASA-1-106021 part of the log entry is a Mnemonic message. Here's the breakdown: %ASA: Indicates the type of device, which in this case is a Cisco ASA (Adaptive Security Appliance) firewall. 1: Denotes the severity level of the message (1 is for emergencies). 106021: This is the specific log message code that corresponds to a predefined event or action in the firewall. So, %ASA-1-106021 represents a specific message type or mnemonic that details the nature of the event or action being logged.