FWSM

[RSAAdmin]

Does anyone know if the Cisco Firewall Service is supported.  The logs appear to be parsed but the source and destination information is  reversed compared to a PIX log. for example

<Date> [Device IP] %FWSM-6-302013: Built outbound TCPconnection 145705472950733872 for <Source IP/Port> (<Source translated IP/POrt>) to<destination IP/port> (<destination translated IP/Port>)

 

<Date> [Device IP] %PIX-6-302013: Built outbound TCPconnection 1409674941 for <dest IP/Port> (<dest translated IP/Port>)To <src IP/Port> (<src translated IP/Port>)

Thanks in advance for any help

[RSAAdmin]

Yes, the %FWSM messages are supported as part of the Cisco PIX message set.

If you are seeing a specific parsing/alerting/reporting problem due to an apparent variable reversal, please contact support.