<div>
<div class="content wysiwyg-content">
I am using the FireGen for PIX log analyzer v2 to do a daily review of my PIX logs. &nbsp;Today I had two messages, 1 listed as an error and the other listed as critical. &nbsp;I need help understanding what to do, if anything, about these two messages.<br />
<br />
The first was &quot;denied SSH session from xxx.xxx.xxx.xxx on interface outside&quot;. &nbsp;I have some IP's listed when I do a &quot;show ssh&quot; in my router, but they're not any of the IP's that show up in the messages on the logs.<br />
<br />
The second was the critical condition which said &quot;Deny IP spoof from (0.0.0.0) to xxx.xxx.xxx.xxx on interface outside&quot;.<br />
<br />
It looks like my firewall is working correctly by blocking these, but I want to know if I need to do anything more.<br />
<br />
Thanks<br />

</div>
</div>


I am using the FireGen for PIX log analyzer v2 to do a daily review of my PIX logs.  Today I had two messages, 1 listed as an error and the other listed as critical.  I need help understanding what to do, if anything, about these two messages.

The first was "denied SSH session from xxx.xxx.xxx.xxx on interface outside".  I have some IP's listed when I do a "show ssh" in my router, but they're not any of the IP's that show up in the messages on the logs.

The second was the critical condition which said "Deny IP spoof from (0.0.0.0) to xxx.xxx.xxx.xxx on interface outside".

It looks like my firewall is working correctly by blocking these, but I want to know if I need to do anything more.

Thanks


Need help deciphering PIX messages

Software firewalls, also known as host-based firewalls, provide a layer of software on one host that controls network traffic in and out of that single machine. Most operating systems now include firewall software, but many available software firewalls include central distribution, antivirus systems and disaster recovery.

Software Firewalls

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).