ASA 5500 syslog not getting captured in Centralised syslog server

[avinash.juvekar]

Hi,

Recently i have upgraded the IOS of ASA5550 (in HA mode) to 8.4.2 from 8.0.5, after OS upgrade we found that the syslog from thses firewalls are not getting captured/transfered to centralised syslog server. The server is reachable from the firewalls.

all other traffic is working fine. Please suggest.

Thx .Avinash

[ajay chauhan]

Please post your configuration.

[avinash.juvekar]

This issue got resolved. The configuration was right for syslog. After clearing syslog flow on the MPLS firewall this issue got resolved.

[rmeans]

Interesting

I had a similar problem. Syslog was not passing through or being sent to the correct interface on our central firewall. Show conn displayed the connection between an internal interface the outside network. Syslog should have been sent from one internal to another internal interface. Once I cleared the connection, the new connection was built between the correct internal interfaces.

Any ideas why this occurred?

Thanks for the post

Rick