topic ASA Email Logging Source Interface in Network Security

ASA Email Logging Source Interface

terrygwazdosky — Mon, 11 Mar 2019 22:12:49 GMT

I've got email logging for a few specific syslog messages working and sending to an email server on the inside network. However, the source IP ends up being the DMZ interface. Is there a way to force it to use the inside IP instead?

ASA Code Version 7.22

Inside Interface IP: 10.104.36.4 Mask:255.255.255.0

DMZ IP: 10.100.20.1 Mask:255.255.255.0

SMTP Server IP: 10.100.10.100

Logging commands in config:

logging enable

logging list email-alerts message 106100

logging mail email-alerts

logging from-address ASA@xyz.com

logging recipient-address tgw@xyz.com level debugging

Thank you.

ASA Email Logging Source Interface

mirober2 — Sat, 14 Jan 2012 16:58:18 GMT

Hi Terry,

The ASA will automatically select the source interface based on the routing table, which is not a configurable option. This is by design as the ASA will only allow communication to an interface from hosts behind that same interface. In other words, the server won't be able to reach the inside interface if it is behind the DMZ interface.

-Mike

ASA Email Logging Source Interface

terrygwazdosky — Mon, 16 Jan 2012 13:17:58 GMT

I should have secified in my original post - the mail server is behind the inside interface not the DMZ.

ASA Email Logging Source Interface

Julio Carvajal — Mon, 16 Jan 2012 18:50:53 GMT

Hello Terry,

So is the SMTP server on the inside??

Can you provide a show route from your asa?

Regards,

Julio