topic Re: IOS Changes to FW Alert Reporting in Network Security

IOS Changes to FW Alert Reporting

ms4561 — Mon, 11 Mar 2019 09:35:14 GMT

A few days ago I upgraded my IOS from 12.4(6)T to 12.4(11)T1. I've not made any additional config changes other than implementing IPS v5. Since then I've noticed a change in reporting format (more detail) to the drop alerts (see attached syslog). In addition I've noticed that the FW is not reporting as many drops & the direction of the drops are primarily outbound(my IP > out, no ACL out is used) since the upgrade.

The syslog attachments shows FW drops alerts the different IOS's.

How anyone else noticed these changes? Can anyone comment if they have seen these changes.

Regards

Mike

Re: IOS Changes to FW Alert Reporting

dsweeny — Fri, 23 Feb 2007 14:35:52 GMT

Refer this link to kown IPS feature support in IOS 12.4(11)T1

http://www.cisco.com/application/pdf/en/us/guest/products/ps6540/c1161/cdccont_0900aecd805c35e3.pdf

Re: IOS Changes to FW Alert Reporting

ms4561 — Sat, 24 Feb 2007 02:07:40 GMT

Thanks for the link. I've read the pdf & I dont' see any reference to changes to firewall alert reporting. I'm looking for details not sales talk.

Regards