Security Association Negotiation Status

Classification

Rule Name	Rule Type	Common Event	Classification
Security Association Negotiation Status	Base Rule	Negotiation Status	Information
ASA-5-713120 : IKE Phase 2 Complete	Sub Rule	IKE Phase 2 Complete	Activity
ASA-5-713049 : IPSEC Tunnel Established	Sub Rule	Traffic Allowed by Network Firewall	Network Allow
ASA-5-713119 : IKE Phase 1 Complete	Sub Rule	IKE Phase 1 Complete	Activity
ASA-3-713167 : Remote User Authentication Failure	Sub Rule	User Logon Failure	Authentication Failure
ASA-5-713903 : Freeing Previously Allocated Memory	Sub Rule	Freeing Up Memory	Information

Mapping with LogRhythm Schema  

Device Key in Log Message	LogRhythm Schema	Data Type
N/A	<vmid>	Number
N/A	<severity>	Number
N/A	<sip>	Number
N/A	<dip>	Number
N/A	<login>	Text/String
N/A	<subject>	Text/String
N/A	<group>	Number
N/A	<tag2>	Text/String

×