Cisco ASA 5505 Configuration Manual page 1099

Chapter 51 Configuring Threat Detection
Configuring Advanced Threat Detection Statistics
You can configure the adaptive security appliance to collect extensive statistics. This section includes
the following topics:
•
•
•
•
•
•
Information About Advanced Threat Detection Statistics
Advanced threat detection statistics show both allowed and dropped traffic rates for individual objects
such as hosts, ports, protocols, or access lists.
Enabling advanced statistics can affect the adaptive security appliance performance, depending on the
Caution
type of statistics enabled. Enabling host statistics affects performance in a significant way; if you have
a high traffic load, you might consider enabling this type of statistics temporarily. Port statistics,
however, has modest impact.
Guidelines and Limitations
This section includes the guidelines and limitations for this feature:
Security Context Guidelines
Only TCP Intercept statistics are available in multiple mode.
Firewall Mode Guidelines
Supported in routed and transparent firewall mode.
Types of Traffic Monitored
Only through-the-box traffic is monitored; to-the-box traffic is not included in threat detection.
Default Settings
By default, statistics for access lists are enabled.
Configuring Advanced Threat Detection Statistics
By default, statistics for access lists are enabled. To enable other statistics, perform the following steps.
OL-20339-01
Information About Advanced Threat Detection Statistics, page 51-5
Guidelines and Limitations, page 51-5
Default Settings, page 51-5
Configuring Advanced Threat Detection Statistics, page 51-5
Monitoring Advanced Threat Detection Statistics, page 51-7
Feature History for Advanced Threat Detection Statistics, page 51-8
Configuring Advanced Threat Detection Statistics
Cisco ASA 5500 Series Configuration Guide using ASDM
51-5