topic smtp email logging alerts in Network Security

smtp email logging alerts

lcaruso — Mon, 11 Mar 2019 19:36:04 GMT

Nowadays, most mail servers require authentication and many also require encryption. As far as I can tell, the ASA offers no alternative ports and authentication for email logging setup. Does that mean ASA email logging is not possible in modern environments? What workarounds are their for sending email based logging alerts when your site's email server won't let the ASA connect with old insecure protocols and no authentication?

Re: smtp email logging alerts

ben_johnson — Mon, 17 Jan 2011 06:30:43 GMT

If the logging information you're after is typically also available via syslog you could send all of your alerts/warnings/etc to your syslog server. You could then employ a script, such as "swatch" for most *nix varieties, that will watch the log file on the server for "interesting messages" and email those to you. This is one of the methods I employ as a more pro-active way to monitor syslog messages coming from our Cisco devices.

You can find swatch here if you're interested: http://sourceforge.net/projects/swatch/

Cheers,

Ben.

Re: smtp email logging alerts

lcaruso — Mon, 17 Jan 2011 17:16:39 GMT

Thanks for your reply. That's a good idea for sites that are sending to syslog servers.