Hello List, ???? Recently we re-worked some of our network and it involved changing the address of the firewall.? The firewall is an ASA reporting syslog to the ossec machine.? It is the only device that?I have configured in allowed ips in the ossec.conf file.? The ossec box address stayed the same.? Now instead of getting for example "PIX error message" or "PIX warning message" every event from the FW?is "unknown error somewhere in the system".? I was thinking that maybe this is a key issue in the ossec box?? Anybody experienced this?
V/r, Dave
