topic Cisco ISE remote syslog on port udp 2100 in Network Access Control

Cisco ISE remote syslog on port udp 2100

danielesquaranti — Wed, 15 Feb 2023 13:42:40 GMT

Hi,

I'm trying to send remote logging to a syslog server on udp 2100 on CIsco ISE and it doesn't work.

I try with 514 and it works...

I already checked and it's not a syslog server or firewall problem.

Maybe there's a bug?

Re: Cisco ISE remote syslog on port udp 2100

Greg Gibbs — Wed, 15 Feb 2023 22:27:37 GMT

I tested my ISE 3.1p5 instance with a remote logging target using UDP/2100 and it worked as expected. I would suggest ensuring that you don't have a host firewall (Linux/Windows) that is blocking the traffic.

Wireshark capture on my Windows client:

Syslog messages on my Kiwi Syslog Server:

Re: Cisco ISE remote syslog on port udp 2100

balaji.bandi — Wed, 15 Feb 2023 22:33:41 GMT

before we do any further guiding.

is the Syslog listening on that ports?

how about trying a different port 1514 or 5514 and let me know is this works? ( I use below ports not for ISE, other device all works as expected)

what log server ?