topic Re: FWSM, ASA: time based acl - generate logging when it ends in Network Security

FWSM, ASA: time based acl - generate logging when it ends

sthon-dbsys — Mon, 11 Mar 2019 20:28:56 GMT

Hi,

is there any possibillity to generate a syslog message, if a time based acl ends ?

example config:

time-range T_Apr27

absolute end 23:59 27 April 2011

access-list NAME extended permit tcp host x.x.x.x host y.y.y.y eq 1500 time-range T_Apr27

the rule above ends the " 23:59 27 April 2011" and it would be great if I could generate a syslog or snmp trap when the rule ends.

Any ideas or suggestions ?

thx

Re: FWSM, ASA: time based acl - generate logging when it ends

varrao — Fri, 06 May 2011 09:50:32 GMT

I did a bit of recreate for this thing and I dont thinks so we see any logs for the ACL being expired. We dont get any logs in the ASDM syslog nor through snmp.

Through SNMP we can just get the details of the active ACL, but not get any specific information for an ACL being expired.

Let me know if that helps.

Regards,

Varun

Re: FWSM, ASA: time based acl - generate logging when it ends

sthon-dbsys — Fri, 06 May 2011 11:56:53 GMT

thx for the info

it doesn´t really helps, but now I have the confirmation that ther is no logging feature for that. 🙂

Therefore I have to build a script to parse the fwsm configuration and check which rules are expired

thx

sthon

Re: FWSM, ASA: time based acl - generate logging when it ends

varrao — Fri, 06 May 2011 12:04:39 GMT

Sthon,

Keep me posted regarding it.

Thanx,

Varun

Re: FWSM, ASA: time based acl - generate logging when it ends

sthon-dbsys — Fri, 06 May 2011 12:07:52 GMT

script is up and running and looks like it works