topic Does Cisco have a software or appliance can records NAT information? in Network Security

Does Cisco have a software or appliance can records NAT information?

Hele Du — Fri, 21 Feb 2020 13:52:57 GMT

Hi experts,

here is a governmental rule in our country, it must be provide at least 90 days NAT logs(or called source trace) if the market or hotel provide internet services.

I just want to know, does any cisco device can support this ?

The ASA or firepower with internal disk and ISE?

Thanks a lot.

Sure ASAs will log all NAT

Marvin Rhoads — Sun, 31 Jul 2016 00:16:07 GMT

Sure ASAs will log all NAT actions they take. Also all connection records - assuming you have logging enabled at the correct level.

You would need to send your syslog events to an external server for historical archiving.

See something like what this thread suggests:

https://supportforums.cisco.com/discussion/12515061/show-nat-tranlations-asa

Hi Marvin,

Hele Du — Mon, 01 Aug 2016 06:35:57 GMT

Hi Marvin,

I think It hard to read if I am using native CLI command for customer....

I suggest customer to buy a external syslog server for this.