I have a VPN Concentrator 3030 running 4.1.7H. I have the device configured to only send events 1-3 to syslog, but it appears that my syslog is receiving all the events from the Concentrator. I'm seeing the following types of messages:
2005-12-07 14:04:07 Local7.Info 10.5.60.3 56341 12/07/2005 14:04:07.220 SEV=6 IKE/121 RPT=160 12.xxx.xxx.227 Keep-alive type for this connection: None
2005-12-07 14:04:07 Local7.Notice 10.5.60.3 56358 12/07/2005 14:04:07.350 SEV=4 IKE/120 RPT=432 12.xxx.xxx.227 Group [RTIvpn] User [xxxx] PHASE 2 COMPLETED (msgid=382db687)
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...