no.  i continue logging into the acs server to check the details of the event(s)

thank you Jagdeep.  I did get that far.  The emails or syslogs generated do not contain the detail I was looking for.  Do you know if there are variables that can be put into the generated message that will give this information: offending IP, host t...

Is there any way to pass along into the emal message any details from the event?: offending IP, host that access was attempted on, login ID associated with the failed attempt . . . etc.I have been looking for variables that can be put into the Custom...

maybe it's this bug:CSCsd34052crash in isakmp_receiver thread during rekey from 7.x peer.

conduit permit udp mailserver eq smtp anyshould be:conduit permit tcp mailserver eq smtp anysmtp is over TCP. hope this helps