SSH Bypass

[lmqtechnology]

We have been receiving some AAA failure login attempts from external IPs.  Both SSH and HTTPS to the outside interface is restricted to an external IP owned by myself so I cant work out how this could be the case. ASA version is 9.10

[balaji.bandi]

You getting request on outside interface (they gained access) or denied ?

is yout ASA Listening https and ssh port on outside interface ?

can you post the configuraiton to understand better

[lmqtechnology]

All I see in logs is AAA authentication failure against the LOCAL database.  The HTTP and SSH management sessions are the only services configured to use LOCAL.  SSH and HTTP is enabled on outside interface but locked down to certain IPs

[balaji.bandi]

Do you see the IP address coming from unknown ? if the ACL in place for spcific IP only allow, rest should rejected by default.

can you post some example logs please for us to understand.