Cisco ISE remote syslog on port udp 2100

[danielesquaranti]

Hi,

I'm trying to send remote logging to a syslog server on udp 2100 on CIsco ISE and it doesn't work.

I try with 514 and it works...

I already checked and it's not a syslog server or firewall problem.

Maybe there's a bug?

[Greg Gibbs]

I tested my ISE 3.1p5 instance with a remote logging target using UDP/2100 and it worked as expected. I would suggest ensuring that you don't have a host firewall (Linux/Windows) that is blocking the traffic.

Wireshark capture on my Windows client:

Syslog messages on my Kiwi Syslog Server:

[balaji.bandi]

before we do any further guiding.

is the Syslog listening on that ports?

how about trying a different port 1514 or 5514 and let me know is this works? ( I use below ports not for ISE, other device all works as expected)

what log server ?