Cisco ASA Audit Event: 302303

302303: Built TCP state-bypass connection

Cisco ASA is a security device that provides the combined capabilities of a firewall, an antivirus, and an intrusion prevention system. It also facilitates virtual private network (VPN) connections. It helps to detect threats and stop attacks before they spread through the network.

Message: %ASA-6-302303: Built TCP state-bypass connection conn_id from initiator_interface: real_ip /real_port (mapped_ip /mapped_port) to responder_interface: real_ip /real_port (mapped_ip /mapped_port).

Event 302303 is generated when a new TCP-state-bypass connection that would bypass all the TCP state checks, additional security checks and inspections, is created.

How could you resolve this situation?

Use the 'no set connection advanced-options tcp-state-bypass' command to secure TCP traffic with all the normal TCP state checks as well as all other security checks and inspections.

Cisco ASA Auditing Tool

EventLog Analyzer is a comprehensive log management software with which you can centrally collect, analyze, and manage logs from all the different log sources in your network. You also get reports and alerts on your network security, making it a power-packed IT security tool.