ASA log exception

u.oktay — Mon, 11 Mar 2019 22:57:34 GMT

Hi,

How can i except log generation some ip address on ASA.

I want to filter for generation syslog message for spesific IP address on ASA.

Thanks.

u.oktay — Wed, 25 Apr 2012 09:42:35 GMT

Do you have any idea this case?

Thanks.

gaurav bhardwaj — Wed, 25 Apr 2012 12:48:09 GMT

yes you can capture for a perticular host and ip

you have to define access-list for that

as instance if you want capture icmp logfor the host 192.168.2.115

then

first make a access-list

access-list 101 permit icmp host 192.168.2.115 any

then

you have too attach this access-list with capture commend

capture (capture name like newcap) newcap access-list 101 interface (interface name like inside,outside,or dmz1) inside

then the commend is

capture newcap access-list 101 interface inside

then if you ping your inside interface then asa will capture this log

then you can see the log by sh capture (capture name)

sh capture newcap

tell us if it is help you

topic ASA log exception in Network Security