topic Re: Syslog configured in FMC in Network Security

Syslog configured in FMC

shaikh.zaid22 — Thu, 27 Apr 2023 08:40:54 GMT

Hi guys,

I have FTD(active and passive ver 7.0.1) managed via FMC ver 7.0.1.

I have configured the syslog server in FMC to forward vpn logs to the syslog servers.

i am not seeing any vpn logs in the syslog server. I want to know how i can identify the logs are being sent? Also which device will forward the logs FMC or active FTD??

Any guidance will be helpful.

Re: Syslog configured in FMC

buffkata — Thu, 27 Apr 2023 15:41:16 GMT

I have the same setup - I do see both devices to send RAVPN syslogs to the syslog server. Have not looked into details but they seam to be identical but formatted differently - FTD is simply sending syslog type of messages and the FMC is logging a DB type.

When the FTD forward those ravpn messages - they are considered informational - Severity 6 ( make sure you have this configured).

Re: Syslog configured in FMC

shaikh.zaid22 — Thu, 27 Apr 2023 19:32:11 GMT

Can u pls share which types of ravpn logs u selected to forward. if u can share a snap i will configure it exactly and verify.

Re: Syslog configured in FMC

shaikh.zaid22 — Mon, 01 May 2023 13:02:25 GMT

Hi can u pls provide the info

Re: Syslog configured in FMC

cutepbaby — Fri, 14 Jul 2023 10:51:49 GMT

hi please provide more details i have configured also but i dont see them may be this will help