| Message Code | PIX-4-405002 |
| Severity | Warning |
| Description | Received mac mismatch collision from IP_address/MAC_address for authenticated host. |
| Explanation | This packet appears for one of the following conditions: • The Cisco ASA received a packet with the same IP address but a different MAC address fromone of its uauth entries. • You configured the vpnclient mac-exempt command on the Cisco ASA , and the Cisco ASA receives a packet with an exempt MAC address but a different IP address from the corresponding uauth entry. |
| User Action | This traffic might be legitimate, or it might indicate that a spoofing attack is in progress. Check the source MAC address and IP address to determine where the packets are coming from and check to see if they belong to a valid host. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.