Licensing requirements for nsel, Prerequisites for nsel – Cisco ASA 5505 User Manual

Page 1767

Advertising
background image

78-3

Cisco ASA 5500 Series Configuration Guide using the CLI

Chapter 78 Configuring NetFlow Secure Event Logging (NSEL)

Licensing Requirements for NSEL

Note

When NSEL and syslog messages are both enabled, there is no guarantee of chronological ordering
between the two logging types.

Licensing Requirements for NSEL

Prerequisites for NSEL

NSEL has the following prerequisites:

IP address and hostname assignments must be unique throughout the NetFlow configuration.

You must have at least one configured collector before you can use NSEL.

You must configure NSEL collectors before you can configure filters via Modular Policy
Framework.

106023

When a flow was denied by an
ACL attached to an interface
through the access-group
command.

3—Flow was denied.

1001—Flow was denied by the
ingress ACL.

1002—Flow was denied by the
egress ACL.

302013, 302015,
302017, 302020

TCP, UDP, GRE, and ICMP
connection creation.

1—Flow was created.

0—Ignore.

302014, 302016,
302018, 302021

TCP, UDP, GRE, and ICMP
connection teardown.

2—Flow was deleted.

0—Ignore.

> 2000—Flow was torn down.

313001

An ICMP packet to the device
was denied.

3—Flow was denied.

1003—To-the-box flow was
denied because of configuration.

313008

An ICMP v6 packet to the device
was denied.

3—Flow was denied.

1003—To-the-box flow was
denied because of configuration.

710003

An attempt to connect to the
device interface was denied.

3—Flow was denied.

1003—To-the-box flow was
denied because of configuration.

Model

License Requirement

All models

Base License.

Table 78-1

Syslog Messages and Equivalent NSEL Events (continued)

Syslog Message

Description

NSEL Event ID

NSEL Extended Event ID

Advertising