ASA Firewall Commands

[aryarahul]

Hi,

How can i check the hits in a firewall with respect to a given IP.

i want to check whether my network is hitting an ip (say 10.10.10.10) , what is the CLI command to check ?

[Karsten Iwen]

If you have an ACL-entry for that particular host you can use "show access-list" where you see the hit-count at the end of the ACE.

The more general way is to enable logging to a SYSLOG-server, where you can filter for "build connections" and your IP.

If you want a free graphical user-interface you could try PLA (PIX logging architecture). This software is not maintained for many years but still works fine.