cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
9364
Views
0
Helpful
1
Replies

ASA-4-733100: [Scanning]

Tshi M
Level 5
Level 5

I am seeing the following in the ASA syslog:

[ Scanning] drop rate-1 exceeded. Current burst rate is 10 per second, max configured rate is 10; Current average rate is 43 per second, max configured rate is 5; Cumulative total count is 26209

According to the link below, I should adjust the rate. The question is what the appropriate rate recommended by Cisco?

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00809763ea.shtml

1 Reply 1

Yudong Wu
Level 7
Level 7

The scanning drop is an aggregation of the individual drop types, which includes ACL drop, Bad packet drop, Conn limit drop, icmp drop, inspect drop, interface drop, syn attack ....

Therefore, it will depend on your network traffic and there is no a recommended value for this.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card