Cisco ASA Audit Event: 304008

304008: URL server is up. Leaving allow mode

Cisco ASA is a security device that provides the combined capabilities of a firewall, an antivirus, and an intrusion prevention system. It also facilitates virtual private network (VPN) connections. It helps to detect threats and stop attacks before they spread through the network.

Message: %ASA-2-304008: LEAVING ALLOW mode, URL Server is up.

Event 304008 is generated when the 'allow' option of the filter command had been used, and the ASA receives a response from a Websense server that had previously not been responding. With the response, the ASA would exit the 'allow' mode and the URL filtering feature would be reenabled.

How could you resolve this situation?

This event does not require any action.

Cisco ASA Auditing Tool

EventLog Analyzer is a comprehensive log management software with which you can centrally collect, analyze, and manage logs from all the different log sources in your network. You also get reports and alerts on your network security, making it a power-packed IT security tool.