topic Re: syslog and the pix in Network Security https://community.cisco.com/t5/network-security/syslog-and-the-pix/m-p/208369#M590159 <HTML><HEAD></HEAD><BODY><P>I was being dumb. There is an intermediate pix between me and the pix in question, and I had to add an access list to the intermediate pix for it to permit the logging traffic. Doh!</P><P>All working now.</P></BODY></HTML> Fri, 05 Sep 2003 00:45:57 GMT raffski 2003-09-05T00:45:57Z syslog and the pix https://community.cisco.com/t5/network-security/syslog-and-the-pix/m-p/208367#M590157 <P>Do you need to setup an access list to enable syslog messages to a host on the inside interface? I'm not getting syslog messages on kiwi. I have it set up for udp on port 20000 and the pix has the logging host inside 'x' udp/20000 command. In the buffer I see messages being logged, but they don't show up in Kiwi. </P><P>Test messages from Kiwi itself show up so I don't think it's the syslog config. </P> Fri, 21 Feb 2020 06:58:12 GMT https://community.cisco.com/t5/network-security/syslog-and-the-pix/m-p/208367#M590157 raffski 2020-02-21T06:58:12Z Re: syslog and the pix https://community.cisco.com/t5/network-security/syslog-and-the-pix/m-p/208368#M590158 <HTML><HEAD></HEAD><BODY><P>Do a sh log on the pix, and post results here</P></BODY></HTML> Thu, 04 Sep 2003 13:10:29 GMT https://community.cisco.com/t5/network-security/syslog-and-the-pix/m-p/208368#M590158 mostiguy 2003-09-04T13:10:29Z Re: syslog and the pix https://community.cisco.com/t5/network-security/syslog-and-the-pix/m-p/208369#M590159 <HTML><HEAD></HEAD><BODY><P>I was being dumb. There is an intermediate pix between me and the pix in question, and I had to add an access list to the intermediate pix for it to permit the logging traffic. Doh!</P><P>All working now.</P></BODY></HTML> Fri, 05 Sep 2003 00:45:57 GMT https://community.cisco.com/t5/network-security/syslog-and-the-pix/m-p/208369#M590159 raffski 2003-09-05T00:45:57Z Re: syslog and the pix https://community.cisco.com/t5/network-security/syslog-and-the-pix/m-p/208370#M590160 <HTML><HEAD></HEAD><BODY><P>Another question...</P><P>I'm logging two firewalls to PFSS on one server. But now I can't tell which firewall is logging what messages. Any way to easily do this?</P></BODY></HTML> Fri, 05 Sep 2003 08:30:31 GMT https://community.cisco.com/t5/network-security/syslog-and-the-pix/m-p/208370#M590160 raffski 2003-09-05T08:30:31Z Re: syslog and the pix https://community.cisco.com/t5/network-security/syslog-and-the-pix/m-p/208371#M590162 <HTML><HEAD></HEAD><BODY><P>I think if you don't nat the inside interface of your higher level PIX (using nat 0 access-list xxx command) you should be able to differentiate between the two logs from the each PIX inside interface address.</P><P></P><P></P></BODY></HTML> Fri, 05 Sep 2003 12:15:14 GMT https://community.cisco.com/t5/network-security/syslog-and-the-pix/m-p/208371#M590162 osam 2003-09-05T12:15:14Z Re: syslog and the pix https://community.cisco.com/t5/network-security/syslog-and-the-pix/m-p/208372#M590164 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>try using a different facility for each firewall:</P><P></P><P>logging facility 'facility'</P><P></P><P>Kind Regards,</P><P>Tom</P></BODY></HTML> Mon, 15 Sep 2003 19:02:09 GMT https://community.cisco.com/t5/network-security/syslog-and-the-pix/m-p/208372#M590164 tvanginneken 2003-09-15T19:02:09Z