topic Threat detection log entries in multi context mode in Network Security

Threat detection log entries in multi context mode

jones.alexander — Tue, 12 Mar 2019 00:42:04 GMT

Hey guys,

We have a 5585X running in multi context mode, and we are getting log entries for scanning threat detection, such as:

%ASA-4-733100: [ Scanning] drop rate-1 exceeded. Current burst rate is 2 per second, max configured rate is 10; Current average rate is 5 per second, max configured rate is 5; Cumulative total count is 3116

Threat detection is not supported in multi context mode so I cannot tune the thresholds, is there any way that I can get rid of this outside of messing about with logging levels/message IDs?

Threat detection log entries in multi context mode

Jitendra Siyag — Mon, 31 Dec 2012 08:31:15 GMT

check the output of show run threat-detection or show run | in threat in all contexts.

it there is any config enabled then negate it using no command.

Threat detection log entries in multi context mode

jones.alexander — Wed, 02 Jan 2013 00:59:27 GMT

The only config under any context is:

pri/act/fakename/admin# sh run | inc threat

no threat-detection statistics tcp-intercept

Which is also the only threat-detection config available:

pri/act/fakename/admin(config)# threat-detection ?

configure mode commands/options:

statistics Keyword to configure statistics of threat detection