Skip to main content
Skip table of contents

Build/Teardown TCP/UDP Connections

Classification

Rule NameRule TypeCommon EventClassification
Build/Teardown TCP/UDP ConnectionsBase RuleGeneral Firewall LogNetwork Traffic
ASA-6-302013 : Built Inbound TCP ConnectionSub RuleConnection BuiltNetwork Traffic
ASA-6-302014 : Teardown Inbound TCP ConnectionSub RuleConnection TeardownNetwork Traffic
ASA-6-302015 : Built Inbound UDP ConnectionSub RuleBuilt UDP ConnectionNetwork Traffic
ASA-6-302016 : Teardown Inbound UDP ConnectionSub RuleConnection TeardownNetwork Traffic
ASA-6-302013 : Built Outbound TCP ConnectionSub RuleConnection BuiltNetwork Traffic
ASA-6-302014 : Teardown Outbound TCP ConnectionSub RuleConnection TeardownNetwork Traffic
ASA-6-302015 : Built Outbound UDP ConnectionSub RuleBuilt UDP ConnectionNetwork Traffic
ASA-6-302016 : Teardown Outbound UDP ConnectionSub RuleConnection TeardownNetwork Traffic

Mapping with LogRhythm Schema  

Device Key in Log MessageLogRhythm SchemaData Type
N/A<vmid>Number
N/A<severity>Number
N/A<sip>Number
N/A<dip>Number
N/A<dname>Text/String
N/A<sport>Number
N/A<dport>Number
N/A<snatip>Number
N/A<dnatip>Number
N/A<snatport>Number
N/A<dnatport>Number
N/A<sinterface>Text/String
N/A<dinterface>Text/String
N/A<protname>Text/String
N/A<session>Number
N/A<bytesout>Number
N/A<duration>Number
N/A<size>Number
N/A<tag1>Text/String
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.