topic Re: PIX 7.0(2) multiple syslog server not working in Network Security

PIX 7.0(2) multiple syslog server not working

crystal91 — Fri, 21 Feb 2020 08:20:13 GMT

Hi,

I have multiple syslog server problem since my PIX upgrade.

My PIX sends syslog messages to one syslog server per one interface.

according to following configuration, pix sends syslog message to 1.1.1.1(inside) and 3.3.3.3(outside)

what is problem ?

Any help is appreciated.

Thanks

Syslog logging: enabled

Facility: 16

Timestamp logging: enabled

Standby logging: disabled

Deny Conn when Queue Full: disabled

Console logging: level alerts, 0 messages logged

Monitor logging: disabled

Buffer logging: level debugging, 255115322 messages logged

Trap logging: level debugging, facility 16, 255115322 messages logged

Logging to inside 1.1.1.1

Logging to inside 1.1.1.2

Logging to outside 3.3.3.3

Logging to outside 3.3.4.4

Logging to outside 3.3.5.5

Logging to outside 3.3.6.6

History logging: disabled

Device ID: disabled

Mail logging: disabled

ASDM logging: disabled

Re: PIX 7.0(2) multiple syslog server not working

owillins — Mon, 22 Aug 2005 13:27:10 GMT

Prior to using the Alarm and Report features, you must configure each PIX Firewall to generate syslog messages and send them to a syslog server host, one of which can be the host running PFM. The syslog server in PFM listens for messages from the PIX Firewall on UDP port 514. Messages are stored in daily log files on the Windows NT computer running PFM. PFM uses the information in the daily log files to generate reports. To configure each PIX Firewall unit from the Management Client, click Admininstrator>SYSLOG to view options for configuring syslog host and message information.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v51/config/config.htm#xtocid47

Re: PIX 7.0(2) multiple syslog server not working

mikkoss — Sat, 03 Sep 2005 08:38:40 GMT

Hi,

I noticed same problem in my pix 525 v7.0.2. There seems to be a new PIX Interim Release 7.0.2.4 which should fix this bug. (I haven't tried it personaly, as I prefer not to use these Interim releases if not absolutely nessessery).

Mikko