Security Association Negotiation Status

Rule Name

Rule Type

Common Event

Classification

Security Association Negotiation Status

Base Rule

Negotiation Status

Information

ASA-5-713120 : IKE Phase 2 Complete

Sub Rule

IKE Phase 2 Complete

Activity

ASA-5-713049 : IPSEC Tunnel Established

Sub Rule

Traffic Allowed by Network Firewall

Network Allow

ASA-5-713119 : IKE Phase 1 Complete

Sub Rule

IKE Phase 1 Complete

Activity

ASA-3-713167 : Remote User Authentication Failure

Sub Rule

User Logon Failure

Authentication Failure

ASA-5-713903 : Freeing Previously Allocated Memory

Sub Rule

Freeing Up Memory

Information

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<vmid>

Number

N/A

<severity>

Number

N/A

<sip>

Number

N/A

<dip>

Number

N/A

<login>

Text/String

N/A

<subject>

Text/String

N/A

<group>

Number

N/A

<tag2>

Text/String