ASA Monitoring - Attack on TLS

[Fantas]

Hi Team,

I needs urgent support to monitor ASA Attack on TLS. I have seen some stuff on web but its not helping me. As per below bug Alert from cisco , we needs to monitor our ASA 5505 and 5520 so how we can know that if ASAs are being attacked as per below Cisco alert.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvg74693

My question is that , How we could know that our ASAs are under attacked as per above Cisco alert. Can we monitor this through monitoring system like through mib or logs or any other way.

[Marvin Rhoads]

The link you sent was for a bug in ACE (Application Control Engine) products.

Here is the bug for ASAs:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvg97652

There is updated software which fixes the problem and it will be released shortly. (9.1.7-21 and 9.2.4-25). Meanwhile you can use on of the suggested workarounds if you cannot wait.

Also, if you aren't using the ASA for remote access SSL VPN, you can disable the SSL trustpoint(s) (if configured) on any public-facing interface.