Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have an issue with an ASA 5505's syslog data being seen in RME. The data is arriving at the LMS server because the data is seen in the unidentified report. The other unusual symptom is the "Device Alert Identifier" has a red exclamation point after...
I have an unusual problem. I am unable to SSH to the primary firewall but I am able to SSH to the secondary. RSA keys are generated, they have been zeroized and re-generated to no avail. The configuration is replicated to both firewalls so I do not ...
Issue Resolved... found the answer in the release notes for RME. CSCSa57752 matched my issue exactly... Restarting the syslog analyzer process fixed the issue...
Thanks for the quick reply... the syslog message looks like the attachment syslog.txt. LMS does see the ASA.. It was discovered. You are right regarding the exclamation mark, it was an error that this morning the ASA became temporarily unreachable......
The description of the event in CS Mars seems pretty self explanatory."This rule detects reporting devices that have not reported an event in the last hour. For chatty devices such as firewalls and IDS, this may indicate connectivity issues or an iss...