Hello everyone.
CiscoASA IDSconnectto the RSA SA using the appropriate protocol SDEE.
As befitsset up audit on the ASA in accordance with the guide "Cisco Adaptive Security Appliance SSM"
When connecting the LogСollector gives the following error:
"ERROR" [processing] [WorkUnit] [processing] Basic https handshake error: short read
"INFO" [processing] [WorkUnit] [processing] Published 0 SDEE events, Total duration 2 (ms), Connect 2 (ms), Event Processing 0 (ms), Publish 0 (ms), Data Response 0 (ms), Data Request 0 (ms), XML Parsing 0 (ms)
"ERROR" [processing] Basic https handshake error: short read"
[processing] [WorkUnit] [processing] Published 0 SDEE events, Total duration 5 (ms), Connect 5 (ms), Event Processing 0 (ms), Publish 0 (ms), Data Response 0 (ms), Data Request 0 (ms), XML Parsing 0 (ms)"
"ERROR" [processing] [WorkUnit] [processing] Basic https handshake error: short read
"INFO" [processing] [WorkUnit] [processing] Published 0 SDEE events, Total duration 2 (ms), Connect 2 (ms), Event Processing 0 (ms), Publish 0 (ms), Data Response 0 (ms), Data Request 0 (ms), XML Parsing 0 (ms)
And so on repeated these logs.
Accordingly in the event log collector does not come.
Interested in any ideas decision errors.
