3

Ok apparently that's what the Splunk plugin does as well. See "Splunk Add-on for Cisco ASA" https://splunkbase.splunk.com/app/1620/ # direction is inbound [cisco_asa_message_id_302013_302015_inbound] REGEX = -30201[35]:\s*(\S+)\s+([Ii]nbound)\s+(\S+)(?:\s+connection)?\s+(\d+)\s+for\s+([^:\s]+)\s*:\s*(?:((?:[\d+\.]+|[a-fA-F0-9]*:[a-fA-F0-9]*:[a-fA-...


2

You could write your firewall rules so that the "noisy" communication falls into a dedicated "Allow" rule and turn off logging for such rule.


1

It's not just NAT but also routing in your case. For NAT this should do: nat (inside,outside) after-auto source dynamic any interface For routing you will need to route "inside" networks to your inside router: route inside 192.168.10.0 255.255.255.0 172.16.0.1 route inside 192.168.20.0 255.255.255.0 172.16.0.1 route inside 192.168.30.0 255.255.255....


Only top voted, non community-wiki answers of a minimum length are eligible