HI all,
I am currently facing with an issue which relate to a false positive.
if someone could help me out here I would greatly appreciate it.
http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/conns_connlimits.html#wp1080774
base on the above, we have configure to collect SNMP traps, We have set the connection limit to 50000 but we had an issue few weeks ago (and we got the right error message: “Connection limit exceeded 50000/50000”). To solve the issue we have set it to 0 (unlimited) but we still have the syslog message.
the log message is
Connection Limit exceeded 81532/0 for input packet from x.x.x.x/443 to y.y.y.y/1376 on interface ABC
we want to set up a SNMP trap for that message but it’s a false positive now…
any idea how to get ride of this please?
with kind regards,
Lancellot
