ESA Authentication Log - No SYSLOG option

[GrahamS1]

Hi,

We configure our ESA's to push SYSLOG messages to the SIEM, but while trying to setup logging for successful/failed logins I have discovered that this is not possible for the Authentication Log.

Does anybody know why this is (It seems perfectly acceptable on other cisco products)? and is there a way around it?

Thanks

[Mathew Huynh]

Hey Graham,

From the ESAs current software it looks to be supporting that log for syslog as you shared, with regards of a workaround to try to get syslog going there is nothing that comes to mind.

There was an enhancement request for this made available sometime back: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCzv43325 currently still under review.

Regards,
Mathew