topic I want to know ASA support port mirror? in Network Security

I want to know ASA support port mirror?

luosongtao — Tue, 12 Mar 2019 00:14:00 GMT

I have a ASA 5520，the version is 7.0。

I want to know ASA support port mirror？I want to connection in a audit equipment on the G0/2。

I want to know ASA support port mirror?

Julio Carvajal — Thu, 25 Oct 2012 17:00:00 GMT

Hello,

No, the ASA does not support port mirroring on any of it's versions or platafforms.

Regards,

Julio

I want to know ASA support port mirror?

luosongtao — Fri, 26 Oct 2012 01:05:02 GMT

Thank you for your reply,Maybe I need to increase a switch.

I want to know ASA support port mirror?

numero.siete — Sat, 08 Dec 2012 01:17:19 GMT

I never tried or tested it but I think you can.

Please follow this link.

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/s8.html#wp1411559

*Please vote my reply if it's helpful.

I want to know ASA support port mirror?

david.tran — Sat, 08 Dec 2012 01:59:45 GMT

1- that's what span port on the switch is designed for

2- if option #1 is not available, you can put an "in-line" from the ASA and tap the data to wherever you want it. Netscout has them (formerly Simena)

I want to know ASA support port mirror?

Julio Carvajal — Sat, 08 Dec 2012 06:46:56 GMT

Hello Everybody,

Just one to mention something I discovered a few days ago, and that is the ASA supports Port-mirroring but only on the asa 5505

Span/mirror port on the ASA 5505 - The ASA 5505 has an eight port Ethernet switch in it making it unique among the ASA product line. Like all Cisco switches, this one also supports traffic span to allow you to capture packets and send them to a destination switchport for analysis.

Command:switchport monitor source_port [tx | rx | both]

Example: Asa5505(config)# interface ethernet 0/4 Asa5505(config-if)# switchport monitor ethernet 0/0 Asa5505(config-if)# switchport monitor ethernet 0/1

You always learn something new

Hope I could help

Julio

I want to know ASA support port mirror?

david.tran — Sat, 08 Dec 2012 12:01:10 GMT

can you send the the traffics from the "outside" interface to the "mirror" port in the ASA 5505?

I want to know ASA support port mirror?

Julio Carvajal — Sat, 08 Dec 2012 16:05:09 GMT

Hello David,

I just discovered this last week but based on the information over the internet you should be able to do it,

I will run a lab myself and see if that happens

Julio