ACL for syslog traffic going via ASA

[mahesh18]

Hi Everyone,

Server--192.168.10.1      -----.192.168.102 Switch----192.168.20.1----inside interface  192.168.20.2 ASA---- 192.168.30.2---Syslog server

I need to send syslogs from server and switch to syslog server behind the ASA.
So i can make ACL from ASA interface inside with source IP of Switch and server?

Regards
MAhesh

[Karsten Iwen · Accepted solution]

You could configure something like the following:

object network SYSLOG-SERVER
 host 192.168.30.2
!
object-group network SYSLOG-SENDERS
 network-object host 192.168.10.1
 network-object host 192.168.20.1
!
access-list INSIDE-IN permit udp object-group SYSLOG-SENDERS object SYSLOG-SERVER eq 514

[mahesh18]

Many thanks Karsten.