barbastica
Technical User
Hi All,
we are just beginning with PIX Firewall in order to integrate this hardware in an audit platform and we have a very simple question:
When we open a SSH connection, why is the message 611101 duplicated?
109005: Authentication succeeded for user 'ssadmin' from 0.0.0.0/0 to X.X.X.X/0 on interface SSH
611101: User authentication succeeded: Uname: ssadmin
611101: User authentication succeeded: Uname: ssadmin
605005: Login permitted from X.X.X.X/43329 to inside:Y.Y.Y.Y/ssh for user "ssadmin"
It could be possible that two SSH connections are opened?.
We are using an application to audit ssh connections and we are not able to get the information we need from these devices in particular. If a second "internal" SSH connection is opened this could be the reason why we lost the tracks of our connection.
Could you please help?
thank you very much in advance.
Kind regards,
Bárbara.
we are just beginning with PIX Firewall in order to integrate this hardware in an audit platform and we have a very simple question:
When we open a SSH connection, why is the message 611101 duplicated?
109005: Authentication succeeded for user 'ssadmin' from 0.0.0.0/0 to X.X.X.X/0 on interface SSH
611101: User authentication succeeded: Uname: ssadmin
611101: User authentication succeeded: Uname: ssadmin
605005: Login permitted from X.X.X.X/43329 to inside:Y.Y.Y.Y/ssh for user "ssadmin"
It could be possible that two SSH connections are opened?.
We are using an application to audit ssh connections and we are not able to get the information we need from these devices in particular. If a second "internal" SSH connection is opened this could be the reason why we lost the tracks of our connection.
Could you please help?
thank you very much in advance.
Kind regards,
Bárbara.