Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 15112 Source: MicrosoftFirewall

Level
Description
Client [<IP address>] exceeded connection limit. The new connection was denied. For more information about this event see the Windows Event Viewer.
Comments
 
This problem occurs because the connection limit of 40 from ISA Server 2000 is maintained in the upgrade to ISA Server 2004. A connection limit of 160 is the default in clean installations of ISA Server 2004. See ME927099 for information on how to increase connection limits.

See ME838706 for additional information about this event.
This happens when a client exceeds the amount of TCP/UDP connections allowed by the ISA server. This does not apply to web proxy traffic. To increase the limit either for all the users or only for a group of computers, go to the ISA server management console. In your server configuration select "General" and under "Additional security policy" select "Define connection limits".

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...