SNMP - False positive

Lance Wendel — Tue, 12 Mar 2019 00:36:29 GMT

HI all,

I am currently facing with an issue which relate to a false positive.

if someone could help me out here I would greatly appreciate it.

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/conns_connlimits.html#wp1080774

base on the above, we have configure to collect SNMP traps, We have set the connection limit to 50000 but we had an issue few weeks ago (and we got the right error message: “Connection limit exceeded 50000/50000”). To solve the issue we have set it to 0 (unlimited) but we still have the syslog message.

the log message is

Connection Limit exceeded 81532/0 for input packet from x.x.x.x/443 to y.y.y.y/1376 on interface ABC

we want to set up a SNMP trap for that message but it’s a false positive now…

any idea how to get ride of this please?

with kind regards,

Lancellot

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/conns_connlimits.html#wp1080774

topic SNMP - False positive in Network Security

SNMP - False positive