topic ASA 5500 syslog not getting captured in Centralised syslog server in Network Security

ASA 5500 syslog not getting captured in Centralised syslog server

avinash.juvekar — Mon, 11 Mar 2019 22:15:21 GMT

Hi,

Recently i have upgraded the IOS of ASA5550 (in HA mode) to 8.4.2 from 8.0.5, after OS upgrade we found that the syslog from thses firewalls are not getting captured/transfered to centralised syslog server. The server is reachable from the firewalls.

all other traffic is working fine. Please suggest.

Thx .Avinash

ASA 5500 syslog not getting captured in Centralised syslog serve

ajay chauhan — Tue, 17 Jan 2012 11:58:57 GMT

Please post your configuration.

ASA 5500 syslog not getting captured in Centralised syslog serve

avinash.juvekar — Wed, 18 Jan 2012 06:26:02 GMT

This issue got resolved. The configuration was right for syslog. After clearing syslog flow on the MPLS firewall this issue got resolved.

ASA 5500 syslog not getting captured in Centralised syslog serve

rmeans — Mon, 13 Aug 2012 16:00:32 GMT

Interesting

I had a similar problem. Syslog was not passing through or being sent to the correct interface on our central firewall. Show conn displayed the connection between an internal interface the outside network. Syslog should have been sent from one internal to another internal interface. Once I cleared the connection, the new connection was built between the correct internal interfaces.

Any ideas why this occurred?

Thanks for the post

Rick