Cisco ASA 5505 Configuration Manual page 1637

Chapter 72 Configuring NetFlow Secure Event Logging (NSEL)
Table 72-1 Syslog Messages and Equivalent NSEL Events (continued)
Syslog Message
313001
313008
710003
When NSEL and syslog messages are both enabled, there is no guarantee of chronological ordering
Note
between the two logging types.
Licensing Requirements for NSEL
The following table shows the licensing requirements for this feature:
Model License Requirement
All models Base License.
Prerequisites for NSEL
NSEL has the following prerequisites:
•
•
•
Guidelines and Limitations
This section includes the guidelines and limitations for this feature:
Context Mode Guidelines
Supported in single and multiple context modes.
Firewall Mode Guidelines
Supported in routed and transparent firewall modes.
IPv6 Guidelines
Supports IPv6 for the class-map, match access-list, and match any commands.
OL-20339-01
Description
An ICMP packet to the device
was denied.
An ICMP v6 packet to the device
was denied.
An attempt to connect to the
device interface was denied.
IP address and hostname assignments must be unique throughout the NetFlow configuration.
You must have at least one configured collector before you can use NSEL.
You must configure NSEL collectors before you can configure filters via Modular Policy
Framework.
NSEL Event ID
3—Flow was denied.
3—Flow was denied.
3—Flow was denied.
Cisco ASA 5500 Series Configuration Guide using ASDM
Licensing Requirements for NSEL
NSEL Extended Event ID
1003—To-the-box flow was
denied because of configuration.
1003—To-the-box flow was
denied because of configuration.
1003—To-the-box flow was
denied because of configuration.
72-3