topic Re: Cisco ISE and Logging Categories Per-instance in Network Access Control

Cisco ISE and Logging Categories Per-instance

pepebravo — Wed, 11 Sep 2019 14:35:15 GMT

Hello,

with ACS it was possible to configure different syslog collectors per ACS node in a distributed environment. It makes sense if we have different ACS nodes distributed around the world and we want to configure it based on location.

We are migrating the current configuration to Cisco ISE and we've found out that we only have the "Global Option".

Any idea/suggestion about how to configure it with ISE?

Thank you,

Pepe

Re: Cisco ISE and Logging Categories Per-instance

pan — Wed, 11 Sep 2019 15:27:14 GMT

At the moment all PSN node send logs to primary and secondary MNT node and if you have configured any syslog server then PSNs will send to that particular syslog server.

If you need one location PSN should send log to a syslog and another location PSN to send logs to another syslog server then this would be a new feature request in ISE.

I would suggest to open a TAC case and get a feature request raised for this.

Re: Cisco ISE and Logging Categories Per-instance

Jason Kunst — Wed, 11 Sep 2019 15:34:59 GMT

You can also send syslog to a syslog proxy of sorts