Labels

API-SDK-Extensibility
9
APIs
26
ArcMC
118
Big Data
5
Cloud
34
Connectors
442
Content
23
Context Data
10
Deploy & Arch.
28
ESM
263
Investigate
12
Language Support
5
Logger-Search-Reporting
64
MSSP
4
Recon
26
SOAR
33
SODP (ADP)
24
Transformation Hub
40
UEBA-ML-AI-Interset
3
UI-Dashboard-Widget
13
Idea ID: 2811409

Extending CISCO ASA parser to cover Cisco Firepower NGFW syslog

gmchacko
Status: Waiting for Votes

Waiting for Votes

See status update history

Similar to how current default ASA parser is accommodating the PIX and other modules like FWSM, consider enhancing the parser to handle FTD Syslog message as well

Reference Firepower Syslog

https://www.cisco.com/c/en/us/td/docs/security/firepower/Syslogs/b_fptd_syslog_guide/syslogs1.html#con_8584413

Reference CISCO ASA

https://www.cisco.com/c/en/us/td/docs/security/asa/syslog/b_syslog/syslogs1.html#con_8584413

101001

Error Message %ASA-1-101001: (Primary) Failover cable OK.

101001

Error Message %FTD-1-101001: (Primary) Failover cable OK.

Tags:

  •    those easy things could get repaired and fed back to you, when the parsers were in GitHub or similar.

    The just releasing them to the customer via zip file will end up in the mess you were trying to get hold off, when MF started to not give up on parser to customers anymore...

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.