Cisco ASA log real destination IP

[Matt Roberts]

I'm wanting to create some reports on destination IP but the logs only shows the translated IP. Is there anyway to log the real destination IP?

[Rishabh Seth]

Hi Matt,

As per my knowledge the ASDM log veiwer shows only the translated IP, but the connection creation log has details of the real and translated IP.

Hope it helps!!!

Thanks,

RS

Rate if it helps!!

[Matt Roberts]

How do I view the connection log? I google it but found no results for a connection log.

[Rishabh Seth]

Hi Matt,

I am referring to the connection build logs that are generated at the time of connection creation.

You can view it in ASDM log viewer. In the syslogs you can see logs for connection creation.

For example:

302020

Error Message %ASA-6-302020: Built {in | out}bound ICMP connection for faddr { faddr | icmp_seq_num } [( idfw_user)] gaddr { gaddr | cmp_type } laddr laddr [( idfw_user)]

Explanation An ICMP session was established in the fast-path when stateful ICMP was enabled using the inspect icmp command.

Recommended Action None required.

-RS