topic Cisco ASA Logging in Network Security

Cisco ASA Logging

Lovleen Arora — Tue, 12 Mar 2019 05:43:38 GMT

Hi,

We are running Cisco ASA 9.3, and have few questions on logging setup:

1. Can we setup ASA to send NAT messages to one syslog server and DENY ACL messages to another syslog servers?

2. Can we setup ASA to send all messages to a syslog server except a few message IDs (which we think are not necessary part of monitoring)?

Thanks in advance

Lovleen

Karsten Iwen — Thu, 02 Apr 2015 05:21:57 GMT

1) No, but you could send all logs to one server and this server forwards selected messages to another server.

2) You can disable selective messages:

Vibhor Amrodia — Thu, 02 Apr 2015 10:30:03 GMT

Hi,

This would be possible with the fix for this enhancement:-

https://tools.cisco.com/bugsearch/bug/CSCun20291/?reffering_site=dumpcr

Thanks and Regards,

Vibhor Amrodia

Lovleen Arora — Fri, 03 Apr 2015 22:34:01 GMT

thanks for your response

Lovleen Arora — Fri, 03 Apr 2015 22:34:36 GMT

thanks