Problem between FA and Cisco PIX515E ver 7.0
Here is some detail from a log:
[10:40:35:598]|[10-07-2005]|[com.adventnet.la.util.pe.FormatIdentifier]|[INFO]|[17]|: IDENTIFIED LOG FORMAT FOR :: 10.20.11.243 DATA :: <166>:%PIX-session-6-305012: Teardown dynamic UDP translation from INSIDE:10.1.1.241/1055 to OUTSIDE:205.162.49.242/13088 duration 0:01:15 FORMAT ::CISCO_PIX|
[10:40:35:598]|[10-07-2005]|[com.adventnet.la.util.pe.FormatIdentifier]|[INFO]|[17]|: LEARNING PRE LOG FORMAT FAILED :: 10.20.11.243 DATA :: <166>:%PIX-session-6-305012: Teardown dynamic UDP translation from INSIDE:10.1.1.241/1055 to OUTSIDE:205.162.49.242/13088 duration 0:01:15|
[10:40:35:707]|[10-07-2005]|[com.adventnet.la.util.pe.FormatIdentifier]|[INFO]|[17]|: IDENTIFIED LOG FORMAT FOR :: 10.20.11.243 DATA :: <166>:%PIX-session-6-302014: Teardown TCP connection 5988657 for OUTSIDE:68.109.72.151/1211 to INSIDE:10.1.1.160/7777 duration 0:10:03 bytes 1590 FIN Timeout FORMAT ::CISCO_PIX|
[10:40:35:707]|[10-07-2005]|[com.adventnet.la.util.pe.FormatIdentifier]|[INFO]|[17]|: LEARNING PRE LOG FORMAT FAILED :: 10.20.11.243 DATA :: <166>:%PIX-session-6-302014: Teardown TCP connection 5988657 for OUTSIDE:68.109.72.151/1211 to INSIDE:10.1.1.160/7777 duration 0:10:03 bytes 1590 FIN Timeout|
My firewall is at 10.20.11.243 and I am sending in EMBLEM format, but I thought that this build supported that. I have tried with EMBLEM off with no luck too. I have an eval copy running at version 4.0.0 build 4001 with date 29-Aug-2005.
Looks like the data is getting to the server, it just does not like the format?
Please help!!!
John
[10:40:35:598]|[10-07-2005]|[com.adventnet.la.util.pe.FormatIdentifier]|[INFO]|[17]|: IDENTIFIED LOG FORMAT FOR :: 10.20.11.243 DATA :: <166>:%PIX-session-6-305012: Teardown dynamic UDP translation from INSIDE:10.1.1.241/1055 to OUTSIDE:205.162.49.242/13088 duration 0:01:15 FORMAT ::CISCO_PIX|
[10:40:35:598]|[10-07-2005]|[com.adventnet.la.util.pe.FormatIdentifier]|[INFO]|[17]|: LEARNING PRE LOG FORMAT FAILED :: 10.20.11.243 DATA :: <166>:%PIX-session-6-305012: Teardown dynamic UDP translation from INSIDE:10.1.1.241/1055 to OUTSIDE:205.162.49.242/13088 duration 0:01:15|
[10:40:35:707]|[10-07-2005]|[com.adventnet.la.util.pe.FormatIdentifier]|[INFO]|[17]|: IDENTIFIED LOG FORMAT FOR :: 10.20.11.243 DATA :: <166>:%PIX-session-6-302014: Teardown TCP connection 5988657 for OUTSIDE:68.109.72.151/1211 to INSIDE:10.1.1.160/7777 duration 0:10:03 bytes 1590 FIN Timeout FORMAT ::CISCO_PIX|
[10:40:35:707]|[10-07-2005]|[com.adventnet.la.util.pe.FormatIdentifier]|[INFO]|[17]|: LEARNING PRE LOG FORMAT FAILED :: 10.20.11.243 DATA :: <166>:%PIX-session-6-302014: Teardown TCP connection 5988657 for OUTSIDE:68.109.72.151/1211 to INSIDE:10.1.1.160/7777 duration 0:10:03 bytes 1590 FIN Timeout|
My firewall is at 10.20.11.243 and I am sending in EMBLEM format, but I thought that this build supported that. I have tried with EMBLEM off with no luck too. I have an eval copy running at version 4.0.0 build 4001 with date 29-Aug-2005.
Looks like the data is getting to the server, it just does not like the format?
Please help!!!
John