Feature Request - Device Direction in Cisco ASA Events
I've submitted a feature request w/ ArcSight support to populate the Device Direction field in Cisco ASA events. This field is used in most types of firewalls (Check Point, etc) and very handy in content, but in the majority of Cisco ASA events it isn't populated. The inbound and outbound interfaces, however, are populated, so there is sufficient info present to create a value for device direction too.
If this change would benefit you too, please call support and ask for the feature too and refer to FR #61482 so they can assess its priority. Hopefully we're not the only ones who want it.
Thank you for your posts here and interest in this feature request. If you are looking for the functionality in TTP# 61482, please open a Support incident requesting this feature. ArcSight can track general interest on the boards, however, the most effective way for ArcSight to track interest is through the bug/feature request tracking system. The way we do this is to have a discreet list of customers and associated Support incidents associated with a given TTP.
Opening a Support incident also ensures you will receive a notifiction through your Support incident once the feature or bug has been included in an ArcSight product release. So for all TTPs you see listed on the boards and would like to have or know when they are addressed, open a Support incident with the TTP number so we can better meet your needs!