| Message Code | ASA-2-106016 |
| Severity | Critical |
| Description | Deny IP spoof from (IP_address) to IP_address on interface interface_name. |
| Explanation | This message is generated when a packet arrives at the security appliance interface that has a destination IP address of 0.0.0.0 and a destination MAC address of the security appliance interface. In addition, this message is generated when the security appliance discarded a packet with
an invalid source address, which may include one of the following or some other invalid address:
To further enhance spoof packet detection, use the icmp command to configure the security appliance to discard packets with source addresses belonging to the internal network, because the access-list command has been deprecated and is no longer guaranteed to work correctly. |
| User Action | Determine if an external user is trying to compromise the protected network.Check for misconfigured clients. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.