Cisco ASA Audit Event: 302020

302020: Built inbound or outbound ICMP connection

Cisco ASA is a security device that provides the combined capabilities of a firewall, an antivirus, and an intrusion prevention system. It also facilitates virtual private network (VPN) connections. It helps to detect threats and stop attacks before they spread through the network.

Message: %ASA-6-302020: Built {in | out} bound ICMP connection for faddr {faddr | icmp_seq_num} [(idfw_user)] gaddr {gaddr | cmp_type} laddr laddr [(idfw_user)] type {type} code {code}.

Event 302020 is generated when an ICMP session is established in the fast-path when stateful ICMP had been enabled using the 'inspect icmp' command. The message contains information on the:

• IP address of the foreign, global and local host.
• Name of the identity firewall user.
• The user name associated with the host from where the connection had been initiated.
• ICMP type and code.

How could you resolve this situation?

This event does not require any action.