RSA Admin

Geo Location for Inbound and Outbound Traffic

Discussion created by RSA Admin Employee on Nov 9, 2012

Setting up some reports for our Mcafee Enterprise G2 Firewalls and I had to create a custom xml to parse the geo location correctly from (dst_geo).   Does any one have an example of how they do geolocation for outbound and inbound traffic.  Is there a way to do this for Cisco ASA's?  Examples of rules or alerts would be great.

Outcomes