-
Hi !
I have an environment made of 2 VM running CentOS 6.6. On the first one I have installed SNORT/PULLEDPORK/BARNYARD2, on the second one I have installed SNORBY.
Snort runs in passive mode, captu…
-
**Describe the bug and expected behavior**
This is a firewall acl in my snapshot
object-group service OGS-TEST-TCP tcp
description my_test_service_ogs-tcp
port-object-group eq 443
!
access-l…
-
Elastic, Kibana v8.12
Cisco ASA integration v2.30.1
Logs sent from ASAs v9.12, v9.18
Log messages 106023 with src or dst interface nameif with a full colon not getting source.ip and destination.i…
-
Hi Martin,
Sorry to send so much things over to you.
When a network is new loading an ACL, seems netmask is being incorrectly interpreted.
Try to process the following config line:
access-list F…
-
## Description
Cisco ASA has security event ids and there are several event id that should be used by SIEM.
[Cisco Secure Firewall ASA Series Syslog Messages](https://www.cisco.com/c/en/us/td/docs/…
-
Hi, trying to connect to a Cisco ASA 5505, I found that the option subcommands SB and SE were not being catched, so I have added this codes cmdSB and cmdSE to line 111 of conn.go. That allowed me to c…
-
As of today all cisco "AAA user authentication Rejected" events are handled by the generic fallback cisco-asa decoder:
````
*Phase 1: Completed pre-decoding.
full event: 'vpn04 %ASA-6-113005: AA…
-
##### SUMMARY
Since the `cisco.asa.asa_config` module backup is downloading the backup to localmachine, we are using the `cisco.asa.asa_command` module and run arbitrary commands to take th…
-
##### SUMMARY
When the objcet_groups are getting sorted while parsing the running configuration into a json, then it will lead to problems.
While trying to use the parsed json to configure…
-
Update from 2.2.1 to 2.3.0 on Elasticsearch 8.3.2
Issue could be reproduced with a different agent policy.
The set value used to be "0.0.0.0" and was reset to "localhost".
Cisco IOS also behave…