ASA Contexts and Syslog

[Julian Regel]

If I have an ASA with 5 security contexts enabled, how is syslog handled? Is it on a per-context basis, or centrally from the admin context?

I'm evaluating a logging solution that is licensed per "device", where each device is a unique syslog source. I don't know whether to plan for one device (as all logging is handled by the admin context), five devices (one per context) or six (one per context + admin context).

Thanks

[Henrik Grankvist]

Hi

Each context will send its own logging messages, so count for 5 seperate devices.

[Julian Regel]

Thanks for the reply. As I've not yet used contexts, does the admin context also have its own syslog source?

Edit: Having just done some more reading, am I right in thinking the admin context is actually one of the five available contexts? So, you actually get four contexts plus an admin context?

[Henrik Grankvist · Accepted solution]

Yes. The admin context is just as any other context, it's just named admin (by default) and has access to the system context.

[Julian Regel]

Thanks for the clarification!

[RuuddeVries]

The Admin context is indeed a separate context, but won't count on the context usage (by license) on the ASA itself. So a 5-conext license would give you 5 functional contexts + the Admin