Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

i have a cisco asa5520 in transparent mode. the interface is on the same subnet as some windows machines, which are generating a lot of broadcast traffic that is filling up the logs.

is there any way to have it not log that its blocking those packets? its a bunch of these messages: "through-the-device packet to from management-only network is denied: udp src..."

im also seeing some of those zeroconf requests that id like to drop logging for.

i tried to just put a rule on the management interface, but apparently thats not allowed.

it looks like turning the syslog filter up to error might solve both issues, but will i be missing any potentially life saving messages by ignoring the info bits?

share|improve this question
up vote 0 down vote accepted

Found it - in syslog setup theres a list of syslog IDs. for this particular alert the ID number is 418001. open that, click suppress, no more message in the log!

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.