72-3
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 72 Configuring NetFlow Secure Event Logging (NSEL)
Licensing Requirements for NSEL
Note When NSEL and syslog messages are both enabled, there is no guarantee of chronological ordering
between the two logging types.
Licensing Requirements for NSEL
The following table shows the licensing requirements for this feature:
Prerequisites for NSEL
NSEL has the following prerequisites:
• IP address and hostname assignments must be unique throughout the NetFlow configuration.
• You must have at least one configured collector before you can use NSEL.
• You must configure NSEL collectors before you can configure filters via Modular Policy
Framework.
Guidelines and Limitations
This section includes the guidelines and limitations for this feature:
Context Mode Guidelines
Supported in single and multiple context modes.
Firewall Mode Guidelines
Supported in routed and transparent firewall modes.
IPv6 Guidelines
Supports IPv6 for the class-map, match access-list, and match any commands.
313001 An ICMP packet to the device
was denied.
3—Flow was denied. 1003—To-the-box flow was
denied because of configuration.
313008 An ICMP v6 packet to the device
was denied.
3—Flow was denied. 1003—To-the-box flow was
denied because of configuration.
710003 An attempt to connect to the
device interface was denied.
3—Flow was denied. 1003—To-the-box flow was
denied because of configuration.
Table 72-1 Syslog Messages and Equivalent NSEL Events (continued)
Syslog Message Description NSEL Event ID NSEL Extended Event ID
Model License Requirement
All models Base License.
To Next Page
Loading...
Need help?
General
