topic Re: Thanks for the reply. As I've in Network Security

ASA Contexts and Syslog

Julian Regel — Tue, 12 Mar 2019 06:08:27 GMT

If I have an ASA with 5 security contexts enabled, how is syslog handled? Is it on a per-context basis, or centrally from the admin context?

I'm evaluating a logging solution that is licensed per "device", where each device is a unique syslog source. I don't know whether to plan for one device (as all logging is handled by the admin context), five devices (one per context) or six (one per context + admin context).

Thanks

HiEach context will send its

Henrik Grankvist — Wed, 17 Jun 2015 20:17:31 GMT

Each context will send its own logging messages, so count for 5 seperate devices.

Thanks for the reply. As I've

Julian Regel — Thu, 18 Jun 2015 09:27:01 GMT

Thanks for the reply. As I've not yet used contexts, does the admin context also have its own syslog source?

Edit: Having just done some more reading, am I right in thinking the admin context is actually one of the five available contexts? So, you actually get four contexts plus an admin context?

Yes. The admin context is

Henrik Grankvist — Thu, 18 Jun 2015 09:27:02 GMT

Yes. The admin context is just as any other context, it's just named admin (by default) and has access to the system context.

Thanks for the clarification!

Julian Regel — Thu, 18 Jun 2015 11:11:15 GMT

Thanks for the clarification!

Re: Thanks for the reply. As I've

RuuddeVries — Tue, 04 Feb 2020 06:17:00 GMT

The Admin context is indeed a separate context, but won't count on the context usage (by license) on the ASA itself. So a 5-conext license would give you 5 functional contexts + the Admin