topic Re: cisco ASA remote syslog server issue in Network Security

cisco ASA remote syslog server issue

Murugank — Mon, 29 Jun 2020 17:56:17 GMT

I was configuring the remote syslog server on my cisco ASA5505 ( version 8.2.1) over port TCP 1514,after configuring this i was facing issue with my existing working connection.

By checking the syslog message able to see that same port TCP-1514 has been used by another connection,in this case want to know how to use the same port to send the syslog message to remote server.

Do i need to use the different port to send the syslog messages to remote syslog server.

Re: cisco ASA remote syslog server issue

balaji.bandi — Mon, 29 Jun 2020 19:01:39 GMT

Can you post the relevant Syslog config and the error message you get?

here is a guide to setup one - maybe you have it, but in case if not

https://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/63884-config-asa-00.html

Re: cisco ASA remote syslog server issue

Murugank — Wed, 01 Jul 2020 00:06:17 GMT

logging enable
logging timestamp
logging buffer-size 1048576
logging monitor debugging
logging buffered debugging
logging trap informational
logging asdm informational
logging queue 8192
logging device-id ipaddress inside

logging host inside xx.xx.xx.xx tcp/1514
logging permit-hostdown

We are seeing that the same port has been used by another connection

Jun 14 2020 11:38:16 : %ASA-6-302013: Built inbound TCP connection 17559894 for OUTSIDE:192.168.10.27/1514 to INSIDE:10.1.4.80/135
Jun 14 2020 11:38:46 : %ASA-6-302014: Teardown TCP connection 17559894 for OUTSIDE:192.168.10.27/1514 to INSIDE:10.1.4.80/135 duration 0:00:30 bytes 0 SYN Timeout