Does anyone know if the Cisco Firewall Service is supported. The logs appear to be parsed but the source and destination information is reversed compared to a PIX log. for example
<Date> [Device IP] %FWSM-6-302013: Built outbound TCPconnection 145705472950733872 for <Source IP/Port> (<Source translated IP/POrt>) to<destination IP/port> (<destination translated IP/Port>)
<Date> [Device IP] %PIX-6-302013: Built outbound TCPconnection 1409674941 for <dest IP/Port> (<dest translated IP/Port>)To <src IP/Port> (<src translated IP/Port>)
Thanks in advance for any help
Yes, the %FWSM messages are supported as part of the Cisco PIX message set.
If you are seeing a specific parsing/alerting/reporting problem due to an apparent variable reversal, please contact support.