Cisco ASA firewalls patterns for outbound and inbound directions
purbon opened this issue · comments
There is a problem with the built-in patterns for Cisco ASA firewalls. When the direction is "outbound", the src_ip/src_port and dst_ip/dst_port are reversed. This PR fixes this.
The Logstash Cookbook should be updated for this purpose, see #1369.
Relates to elastic/logstash#1383 and #47