RSS Feed

Tags

Archives

Categories

Recent Posts

Links


Fixing cisco %ASA-3-201008: Disallowing new connections

December 12th, 2011 by D in cisco, howto

So you are using TCP logging and the ASA is shooting out error %ASA-3-201008, and blocking your network traffic.

Accorting to cisco documentation the ASA will deny new sessions if you use TCP logging and that the syslog server is unreachable

If you are using TCP as the logging transport protocol, the ASA denies new network access sessions as a security measure if the ASA is unable to reach the syslog server, if the syslog server is misconfigured, or if the disk is full.

UDP-based logging does not prevent the ASA from passing traffic if the syslog server fails.

See the link

Set “logging permit-hostdown

Comments are closed.