Solved

Hitcount meaning in ASA Firewall

Posted on 2011-09-21
4
2,050 Views
Last Modified: 2012-05-12
What is the Hitcount meaning in ASA access-lists concept

Ex : NEW-TCL-ILL-FW# sh access-list Outlist-11-MAR-11 121.242.X.X | i 115.111.22$
access-list Outlist-11-MAR-11 line 108 extended permit ip any host 115.X.X.X (hitcnt=13) 0xaad9b9b1

I am not able to PING to 115.111.X.X from Internet but the hitcount is increasing,what does it means

Regards
ramu
0
Comment
Question by:RAMU CH
  • 2
  • 2
4 Comments
 
LVL 4

Assisted Solution

by:alexeykomarov
alexeykomarov earned 500 total points
ID: 36572612
Hi
try permit icmp
access-list Outlist-11-MAR-11 line 108 extended permit icmp any host 115.X.X.X
0
 
LVL 1

Author Comment

by:RAMU CH
ID: 36572754
Thanks for the reply..

What is basic concept of hitcount

Regards
ramu
0
 
LVL 4

Accepted Solution

by:
alexeykomarov earned 500 total points
ID: 36572841
When a packet is matched against an ACE, the security appliance increments the hitcnt (hit count) counter by one.
0
 
LVL 1

Author Closing Comment

by:RAMU CH
ID: 36922422
Thanks
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Suggested Solutions

When I upgraded my ASA 8.2 to 8.3, I realized that my nonat statement was failing!   The log showed the following error:     %ASA-5-305013: Asymmetric NAT rules matched for forward and reverse flows It was caused by the config upgrade, because t…
From Cisco ASA version 8.3, the Network Address Translation (NAT) configuration has been completely redesigned and it may be helpful to have the syntax configuration for both at a glance. You may as well want to read official Cisco published AS…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now