topic Re: LOGS on PIX in Network Security https://community.cisco.com/t5/network-security/logs-on-pix/m-p/916671#M494690 <HTML><HEAD></HEAD><BODY><P>Use the logging list command in order to capture the syslog for LAN-to-LAN and Remote access IPsec VPN messages alone. This example captures all VPN (IKE and IPsec) class system log messages with debugging level or higher.</P><P>Refer to the document PIX/ASA 7.x and later with Syslog Configuration Example</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805a2e04.shtml#capturevpn" target="_blank">http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805a2e04.shtml#capturevpn</A></P><P></P></BODY></HTML> Mon, 19 Nov 2007 16:52:46 GMT jbayuka 2007-11-19T16:52:46Z LOGS on PIX https://community.cisco.com/t5/network-security/logs-on-pix/m-p/916670#M494689 <P>I have the following Logs .</P><P> %PIX-6-202522: Built outbound TCP connection 258647931 for DLS-DMZ:172.16.55.4/8080 (62.241.155.45/8080) to inside:192.168.1.5/55192 (192.168.1.5/55192) </P><P> %PIX-6-202522: Teardown TCP connection 258647935 for DLS-DMZ:172.16.55.4/8080 to inside:192.168.1.5/33189 duration 0:11:54 bytes 584625 TCP FINs </P><P> %PIX-6-202522: Teardown TCP connection 258647955 for DLS-DMZ:172.16.55.4/8080 to inside:192.168.1.5/57279 duration 0:05:44 bytes 9654 TCP FINs </P><P> %PIX-6-105012: Deny TCP (no connection) from 192.168.1.5/54517 to 215.15.85.2/8080 flags FIN ACK on interface inside </P><P> %PIX-6-105012: Deny TCP (no connection) from 192.168.1.5/59118 to 215.15.85.2/8080 flags FIN ACK on interface inside </P><P> %PIX-6-105012: Deny TCP (no connection) from 192.168.1.5/44205 to 215.15.85.2/8080 flags FIN ACK on interface inside </P><P></P><P>what does these logs mean and is the deny word normal after teardown the session or not?</P> Fri, 21 Feb 2020 09:47:24 GMT https://community.cisco.com/t5/network-security/logs-on-pix/m-p/916670#M494689 welcomeccie 2020-02-21T09:47:24Z Re: LOGS on PIX https://community.cisco.com/t5/network-security/logs-on-pix/m-p/916671#M494690 <HTML><HEAD></HEAD><BODY><P>Use the logging list command in order to capture the syslog for LAN-to-LAN and Remote access IPsec VPN messages alone. This example captures all VPN (IKE and IPsec) class system log messages with debugging level or higher.</P><P>Refer to the document PIX/ASA 7.x and later with Syslog Configuration Example</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805a2e04.shtml#capturevpn" target="_blank">http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805a2e04.shtml#capturevpn</A></P><P></P></BODY></HTML> Mon, 19 Nov 2007 16:52:46 GMT https://community.cisco.com/t5/network-security/logs-on-pix/m-p/916671#M494690 jbayuka 2007-11-19T16:52:46Z