topic Re: Login Notification in Network Security

Login Notification

dexteroc1 — Mon, 11 Mar 2019 16:32:43 GMT

I have two ASA 5520's and I would like to be alerted via email OR an entry to be recorded in the syslog whenever someone logs into the firewall. Is this possible and how would it be done.

Thanks.

Re: Login Notification

Collin Clark — Wed, 28 Oct 2009 15:11:49 GMT

You need to send to syslog, a minimum of level 6 (Informational) for authentication notifications to appear.

Hope that helps.

Re: Login Notification

dexteroc1 — Wed, 28 Oct 2009 17:17:20 GMT

I tried it but it logs way too many messages. Almost like being on Debug. I think I will go back to Warning before I run out of space for the logs.

Thanks.

Re: Login Notification

francisco_1 — Wed, 28 Oct 2009 17:22:32 GMT

you could setup filtering on your syslog and output authentication syslog info to a seperate window

for example with kiwi syslog see http://articles.techrepublic.com.com/5100-22_11-5194745.html

Re: Login Notification

Collin Clark — Wed, 28 Oct 2009 18:29:43 GMT

Check out this link and look for the E-mail Address and Use the Message List headings.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805a2e04.shtml