Firewall access rule log hits

jbaldwin33 — Tue, 12 Mar 2019 04:04:30 GMT

I set up an access rule to deny any any out port 25. I have some hits and want to know what ip address is hitting the access rule. How do I set up logging? Then how do I view the log to see the hits?

Hi, What FW is it?You can see

Mujtaba Imran Mohammed — Mon, 14 Apr 2014 19:04:14 GMT

Hi,

What FW is it?

You can see logs in ASDM (GUI interface). Access the ASA through the GUI interface (ASDM).

Once you log in to the ASDM, go to

Configuration > firwall > access rules

Right Click on the rule that you had created and choose show log.

You will be able to see the ip addresses hitting it. The real time application of the rule.

For logging.

Install a syslog server and configure the FWs syslog server settings to point to that server.

Hope this helps. Let me know if you need more help.

topic Firewall access rule log hits in Network Security

Firewall access rule log hits

Hi, What FW is it?You can see