Transport settings for ASA's

[David Fini]

Hi,

Is there a way to change transport settings for archive collection based on groups?  We have ~1100 switches/routers that use telnet and 7 ASA's that use SSH. I have the transport order set to telnet first and then SSH.  This is causing ASA failed password attempts to be logged to the MARS appliance and I don't want the SSH passwords to be sent in plain text.  We are using LMS 3.2.

Thanks,

[Joe Clarke]

No, there is no way to tie transport settings to certain device types.  It's an all-or-nothing thing.  For what you want to do, set your protocol order to SSH then TELNET.  For the majority of devices, the SSH will fail, but you can be assured that the ASAs won't have that clear text password logged.