Help with ASA 5505 SYSLOG alerts
We are using Firewall Analyzer to monitor an ASA5505 firewall and I need assistance with creating alerts.
I am not familiar enough with SYSLOG events generated by the device to program the correct alerts and would like some help from an expert in this area.
I am looking for someone who has set this up before, can suggest useful alerts, and is familiar with security related syslog events. For example I'd like to know if/when someone attempts to do a port scan or perhaps IP spoofing.
The firewall does not have IDS or IPS - so specific "attack" messages are not generated but I understand that there should be some warning or error messages generated by other SYSLOG events which we can alarm on.
I will pay for this service - please feel free to email me at eclemens (<at>) gmail.com.
MOD: IF this is an unacceptable post - my apologies.
TIA
New to ADSelfService Plus?