cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
650
Views
0
Helpful
1
Replies

ASA5510/SSM-10 IPS events to Syslog?

eherd
Level 1
Level 1

Hello all,

I'm a Cisco/IOS beginner. I've managed to configure my ASA5510 to do it's thing for the most part. The ASA5510 will write it's IDS events to my syslog server, butI can't seem to find a way to get the SSM-10 Module to do the same. I can log into ADSM 5.0 to view the events manually, but it's a huge pain. Is this normal behavior, or am I missing something (more likely)?

Thanks,

Eric

1 Reply 1

gabelar
Level 1
Level 1

Hey Eric,

Sorry to bring the bad news. Right now SSM will only report SDEE, not syslog. Bottom line is that they only way to correlate IPS alerts and syslog is throught CS-MARS. You cannot generate syslog from SSM.

Review Cisco Networking for a $25 gift card