| Message Code | PIX-4-405001 |
| Severity | Warning |
| Description | Received ARP {request | response} collision from IP_address/MAC_address on interface interface_name. |
| Explanation | The Cisco ASA received an ARP packet, and the MAC address in the packet differs from the ARP cache entry. |
| User Action | This traffic might be legitimate, or it might indicate that an ARP poisoning attack is in progress. Check the source MAC address to determine where the packets are coming from and check to see if it belongs to a valid host. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.