topic Hi Matt, in Network Security

Cisco ASA log real destination IP

Matt Roberts — Tue, 12 Mar 2019 06:57:33 GMT

I'm wanting to create some reports on destination IP but the logs only shows the translated IP. Is there anyway to log the real destination IP?

Hi Matt,

Rishabh Seth — Fri, 27 Nov 2015 20:22:39 GMT

Hi Matt,

As per my knowledge the ASDM log veiwer shows only the translated IP, but the connection creation log has details of the real and translated IP.

Hope it helps!!!

Thanks,

Rate if it helps!!

How do I view the connection

Matt Roberts — Fri, 27 Nov 2015 20:54:37 GMT

How do I view the connection log? I google it but found no results for a connection log.

Hi Matt,

Rishabh Seth — Fri, 27 Nov 2015 21:15:12 GMT

Hi Matt,

I am referring to the connection build logs that are generated at the time of connection creation.

You can view it in ASDM log viewer. In the syslogs you can see logs for connection creation.

For example:

302020

Error Message %ASA-6-302020: Built {in | out}bound ICMP connection for faddr { faddr | icmp_seq_num } [( idfw_user)] gaddr { gaddr | cmp_type } laddr laddr [( idfw_user)]

Explanation An ICMP session was established in the fast-path when stateful ICMP was enabled using the inspect icmp command.

Recommended Action None required.

-RS