Cisco ASA error deleted rules

[allwynmascar]

HI 

I have a situation where it seems some error appeared on the fw and deleted rules.

They are not sure what logs they have right now. 

In any case what logging levels can track this and how can I go ahead troubleshooting? 

In this case config debug is recommended, can someone give me a way forward to work with it as I am not very familiar with ASAs. 

[Marvin Rhoads]

Bet practice is to use external authentication to a AAA server like ACS or ISE. Then the AAA server logs show you who logged in and when.

You should also setup configuration management using something like RANCID (free tool) or SolarWinds NCM or Cisco Prime Infrastructure (licensed products). With those you have external copies of the previous configuration and can always revert to it.

[allwynmascar]

Thanks for the reply.

But lets say now that no logging is enabled can I see any details from the cisco ASA device?

Also how can I check what logging options have been configured on the firewall?

[Marvin Rhoads · Accepted solution]

ASA logging options include local console, local buffer, ASDM buffer, SNMP trap and remote syslog targets. If none of them are enabled then you cannot see any details from the ASA device.

To check the configured logging options, use the following command:

show run logging