Cisco ASA 5510 scanning error

[vinodk_gupta]

Hi,

we have cisco ASA 5510 with ios ver  8.0(4).

we are getting following log. what is the root cause for this & what should we do to resolve.

2011-12-10 00:00:42 Local4.Warning 172.26.4.203 %ASA-4-733100: [ Scanning] drop rate-1 exceeded. Current burst rate is 10 per second, max configured rate is 10; Current average rate is 39 per second, max configured rate is 5; Cumulative total count is 23497

2011-12-10 00:00:42 Local4.Warning 172.26.4.203 %ASA-4-733100: [ Scanning] drop rate-2 exceeded. Current burst rate is 8 per second, max configured rate is 8; Current average rate is 39 per second, max configured rate is 4; Cumulative total count is 140682

These logg is frequently occured.

Please help us to resolve it

Regards

vinod gupta

[varrao · Accepted solution]

Hi Vinod,

These logs are generated because of the threat detection enabled on the ASA, when the traffic hitting the firewall exceeds the limits set in those parameters, you will get these error messages.

To check threat-detection, you can do:

show run threat-detection

You can either remove it or tweak the paramaters a bit.

Thanks,

Varun

[vinodk_gupta]

thanks varun.