Cisco ASA Audit Event: 319003

319003: ARP update for IP address to network processor failed

Cisco ASA is a security device that provides the combined capabilities of a firewall, an antivirus, and an intrusion prevention system. It also facilitates virtual private network (VPN) connections. It helps to detect threats and stop attacks before they spread through the network.

Message: %ASA-3-319003: Arp update for IP address address to NPn failed.

Event 319003 is generated when a message to update an ARP table with an entry is rejected by a network processor. This could be because the module could have been experiencing high utilization of memory or the internal table could have been full.

How could you resolve this situation?

Check if the ARP table is full. If it is not, then check the load of the module by reviewing the CPU utilization and connections per second. If CPU utilization is high and/or there are numerous connections per second, normal operations will resume when the load returns to normal.

Cisco ASA Auditing Tool

EventLog Analyzer is a comprehensive log management software with which you can centrally collect, analyze, and manage logs from all the different log sources in your network. You also get reports and alerts on your network security, making it a power-packed IT security tool.