Cisco ASA Audit Event: 303005

303005: Strict FTP inspection matched in policy map

Cisco ASA is a security device that provides the combined capabilities of a firewall, an antivirus, and an intrusion prevention system. It also facilitates virtual private network (VPN) connections. It helps to detect threats and stop attacks before they spread through the network.

Message: %ASA-5-303005: Strict FTP inspection matched match_string in policy-map policy-name, action_string from src_ifc: sip /sport to dest_ifc: dip /dport.

Event 303005 is generated when an FTP inspection matches any one of the following configured values: filename, file type, request command, server, or username. In case of a match, the action specified in the action string would be performed. The message contains information on the:

• Match clause in the policy map.
• Name of the policy map that had matched.
• Action to be taken.
• Source interface, IP address, and port number.
• Destination interface, IP address, and port number.

How could you resolve this situation?

This event does not require any action.