Cisco ASA - Need to log allowed traffic

Michael156 — Wed, 05 Oct 2022 13:01:34 GMT

Hello Everyone,

I have a quick question that will likely be a no brainer for most of you. I have a Cisco ASA that needs to Log all allowed traffic to a logging host.

There are currently 3 logging hosts on the Configured and I would prefer to only send the allowed traffic logs to one of them as to not fill the hard drives of the other two. So my questions are.

1. How to I log all traffic allowed from the outside interface to inside?

2. Is it possible to only send the allowed traffic logs to one host? I don't believe it is but figured I would ask

Current logging Config (IP and lists Changed for privacy):

logging enable
logging timestamp
logging list LIST1 level warnings
logging list LIST1 level informational class config
logging list LLIST1 level debugging class vpn
logging list LIST1 level debugging class vpnc
logging list LIST1 level debugging class webvpn
logging list LIST1 level debugging class svc
logging buffer-size 10000
logging buffered LIST1
logging trap LIST1
logging asdm informational
logging host inside 1.1.1.1
logging host outside 2.2.2.2
logging host inside 3.3.3.3

Thanks for your time!

topic Cisco ASA - Need to log allowed traffic in Network Security

Cisco ASA - Need to log allowed traffic