Downloadable ACL logging

aniortegr — Mon, 11 Mar 2019 01:27:43 GMT

Hi,

I've configured Uauth access with downloadable ACL on a ASA running 8.1 and I'd like to log the traffic hitting that ACL.

By default, the traffic is logged by the ACL applied on the interface.

I've tried to add the "log" keyword on the ACL defined in the ACS, but it doesn't work.

I've tried to add the "per-user-override" keyword a the end of the "access-group" command, then, I receive no log at all.

For exemple, I've got that :

Oct 6 09:55:39 <firewall-name> Oct 06 2011 09:35:03 <firewall-name> : 
%ASA-5-106100: access-list <ACL-name> permitted tcp Ifname1/10.0.0.1(1361) 
 -> ifname2/10.0.1.1(22) hit-cnt 1 first hit [0x65dc0682, 0x0]

But I want that :

Oct 6 09:55:39 <firewall-name> Oct 06 2011 09:35:03 <firewall-name> : 
 %ASA-5-106100: access-list <Downloadable-ACL-name> permitted tcp Ifname1/10.0.0.1(1361) 
 -> ifname2/10.0.1.1(22) hit-cnt 1 first hit [0x65dc0682, 0x0]

Anyone ?

Thanks.

topic Downloadable ACL logging in Network Access Control

Downloadable ACL logging