topic Problems with ASA 8.4 event type 500004 in Network Security

Problems with ASA 8.4 event type 500004

Luis Perez — Mon, 11 Mar 2019 23:46:48 GMT

I have two ASA 5585 in an active/standby cluster, i have had this problem two times in the last week.

We had problems with the physical network interface card in two servers and these servers started to send an anomalous traffic recognized in my Cisco Security Manager like an event type 500004. The ASA cluster went unavailable like it was suffering an DoS attack, i have an IPS in each ASA and i think it is responsible to control this type of traffic.

Somebody have any idea about a solution for this problem??, I need to control this problem.

Problems with ASA 8.4 event type 500004

Amjad Abdullah — Tue, 28 Aug 2012 08:31:39 GMT

Luis:
I guess you are in the wrong corner. This is security sub-forum under Wireless forums.
you better move the thread to the security main forums.

Nice to catch you in our place though.

Buy a wireless device and come anytime if you need help

Amjad

You want to say "Thank you"?
Don't. Just rate the useful answers,
that is more useful than "Thank you".

Problems with ASA 8.4 event type 500004

Julio Carvajal — Tue, 28 Aug 2012 19:10:04 GMT

Hello Luis,

can you explain whitch device has the 129.125 ip address.

Regards,

Julio

Problems with ASA 8.4 event type 500004

Luis Perez — Tue, 28 Aug 2012 19:22:53 GMT

I don't know which device is this IP i think this is an attacker, but i don´t know why my IPS doesn't drop this traffic. Yesterday I have made configurations in my IPS and i hope this work if this kind of attack start again.

Problems with ASA 8.4 event type 500004

Julio Carvajal — Tue, 28 Aug 2012 19:48:35 GMT

Hello Luis,

Hope so, let us know what happens.

Also if this does not work please send us a good picture of the log you are receving as at least I cannot read it well ( with my glasses on )

Regards

Julio