Pattern 21 : IPSec VPN Activity

Rule Name

Rule Type

Common Event

Classification

Pattern 21 : IPSec VPN Activity

Base Rule

VPN Traffic

Network Traffic

ASA-3-713133 : PFS Group And DH Group Mismatch

Sub Rule

IPSec Proxy Mismatch

Warning

ASA-3-713194 : IPSec Delete Message Sent

Sub Rule

IPSec Delete Message Sent

Warning

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<vmid>

Number

N/A

<sip>

Number

N/A

<login>

Text/String

N/A

<group>

Text/String

N/A

<tag1>

Text/String