topic Cisco ASA logging in Network Security

Cisco ASA logging

shanku2k1 — Fri, 21 Feb 2020 13:28:07 GMT

Dear Team,

One of our client has Cisco ASA 5510, 8.2(1) version.

We have enabled logging and the traffic details are very lesser than the ISP details.
Could you please let us know the command to check whether logging is enabled on all the Access lists. Is there a single command or global command to check the same?
If not, do we have a command to view all the Access lists which is not selected for logging?

Please acknowledge,

Thank you,]
Sam

You can run the command,

JEFF SPRADLING — Tue, 12 May 2015 18:16:50 GMT

You can run the command, "show run access-lists | include log", and it will show you every access-list line that has logging enabled on it. If it returns nothing, then you do not have logging on any of the access-list lines.

Hello Jeff,Thank you for your

shanku2k1 — Tue, 12 May 2015 20:05:14 GMT

Hello Jeff,

Thank you for your reply.

I have asked whether we do have any command to enable logging on all the access-lists or do we have any command, which shows that no logging is enabled.

This will help us to dig the issue.

Awaiting your response,

Thank you,

Shankar

Shankar,I do not know of any

JEFF SPRADLING — Tue, 12 May 2015 20:12:15 GMT

Shankar,

I do not know of any global command to enable logging on all the access-lists. I believe you will have to issue the "log" keyword at the end of every access-list line in order to enable it.

Regards,

Jeff