|We have a remote site connected to us through a VPN connection.|
I have noticed the following message pop up in the log just starting recently:
2009-04-22 23:00:29 Local4.Warning 192.168.1.1 %PIX-4-400014: IDS:2004 ICMP echo request from 10.10.1.1 to 192.168.1.117 on interface outside
The 10.10.1.1 is the remote site network, it attempts to connect to multiple IP addresses on our side (servers and workstations). These are appearing quite frequently and are filling the log. No major changes have been made yet these messages are a relatively new occurrence. Does anyone have any suggestions on what I can do to figure out what this is and why it is happening? Searching for the specific cisco message %PIX-4-400014 just provides me with some generic descriptions of the event and says it "could" be normal or "could" be an attempted intrusion. Thanks!