topic Syslog Software for ASA / PIX in Network Security

Syslog Software for ASA / PIX

arnis — Fri, 21 Feb 2020 09:02:53 GMT

I need some advice, I need some good software that can take the ASA syslog an make in into something readable, preferably graphs on a HTTP interface.

And I am looking for something that does not cost as much as CS-MARS.

any sugestions on what works well

Re: Syslog Software for ASA / PIX

grant.maynard — Fri, 14 Jul 2006 20:33:45 GMT

For syslog try Kiwi's syslog daemon, but I don't think syslog is going to give you any graphs.

For real time stats use the ASDM, or use an SNMP app to poll the ASA.

Re: Syslog Software for ASA / PIX

Patrick Iseli — Fri, 14 Jul 2006 22:27:02 GMT

Syslog server could be:

- Kiwi Syslog:

http://www.kiwisyslog.com/

- 30COM Deamon

http://www.ncat.co.uk/Download/

- There is also a Cisco Syslog Server which supports TCP Syslog 514 - pfss512.exe

http://www.cisco.com/cgi-bin/tablebuild.pl/pix?sort=release

Commercial products that creates graphs and analyzes Syslog to generate stats could be:

- FireGen http://www.eventid.net/firegen/

- Try this one FWLOGSUM (Freeware).

http://www.ginini.com/software/fwlogsum/

http://www.ginini.com/software/fwlogsum/converters/

It uses basicly PERL scripts and supports a wide range of Firewalls. You just need to install Perl in your Windows environment.

- Try Sawmill (Eval version)

http://www.sawmill.net/

- EIQ Networks Network Security Analyzer eiqnetworks.com

Hope that gives you some ideas what to try.

sincerely

Patrick

Re: Syslog Software for ASA / PIX

ph0enix — Sat, 15 Jul 2006 16:59:35 GMT

I'm using syslog-ng on a gentoo system. It logs to a MySQL database. You can combine it with phpsyslogng which gives you a web interface (PHP based) for viewing the logs.