accounting nat

[cineca]

Hi all.

Our internal network is protected by an ASA 5540 v7.2(2).

We use private addresses on the inside interfaces with NAT.

For security reasons, we would like to keep a log of the nat translations.

Is there a way to do it without keeping log of any connection?

Thank you in advance.

Denis.

[Collin Clark]

I don't think so. I think the easiest way would be to have the firewall dump it's log to a linux syslog and write a script to parse out what your looking for.