topic Re: ASA generating 106001 syslog iD in Network Security

ASA generating 106001 syslog iD

rdodderi — Mon, 11 Mar 2019 16:02:48 GMT

Hi,

I can see huge syslog generation with syslog ID 106001 and also random users across my network are facing Messenger's disconnection and reconnection.

Re: ASA generating 106001 syslog iD

Collin Clark — Wed, 05 Aug 2009 12:16:59 GMT

Here's an explaination.

http://www.cisco.com/en/US/docs/security/asa/asa72/system/message/logmsgs.html#wp1279735

Re: ASA generating 106001 syslog iD

handsy — Wed, 05 Aug 2009 12:59:51 GMT

More info required. Please paste an example log entry, and also the access-list entries that the users should be hitting for Messenger.

Re: ASA generating 106001 syslog iD

rdodderi — Thu, 06 Aug 2009 04:14:43 GMT

Hi Handsy,

Please find the sample Log entry and access-list. On the log file the IP's which you see some of them are valid Yahoo,MSN, and Google Chat server IP's and some does not get resolved to any.

Kindly let me know if you need more info from my side.

Thanks

Rajiv

Re: ASA generating 106001 syslog iD

handsy — Thu, 06 Aug 2009 17:18:10 GMT

I think the key to this problem is that an IP from inside your network, namely 220.x.x.123 is getting blocked on it's return, i.e. it's allowed out, but not back in.

Do you have an ACL entry to allow HTTP access to this IP? (I can't tell as you have xxxx'ed them out).