Block traffic sourced from ASA 5540

[manoj-wadhwa]

Hi Champs,

I would like to know if there is any way to block traffic sourced from an ASA 5540. Basically i am seeing some snnmp authentication failures and the ip address in the message is sourced from ASA. The irony is that i do not have any snmp configured on the firewall as such. Thanks!

Best Regards,

Manoj

[Panos Kampanakis]

It could be traffic through the ASA that is translated to the ASA's interface ip address. Try checking that to see who is really sending the SNMPs.

You cannot block traffic on the ASA that is sourced from the ASA itself with something like ACLs. Of course you can block it on the next hop device with something like an ACL.

I hope it helps.