Hello, i have installed the Firewall Analyzer and i send all the syslogs from ASA 5520 to the Firewall Analyzer.

I have a question as regards the hits.

What are the hits? It is every communication (session) from one IP to another?

If for example a mail server begins a smtp communication with another mail server this is done with one hit? If this mail server send multiple email on one smtp session to another mail server this is one hit?

 

Thank you