Cisco ASA Logging

[Lovleen Arora]

Hi,

We are running Cisco ASA 9.3, and have few questions on logging setup:

1. Can we setup ASA to send NAT messages to one syslog server and DENY ACL messages to another syslog servers?

Or

2. Can we setup ASA to send all messages to a syslog server except a few message IDs (which we think are not necessary part of monitoring)?

Thanks in advance

Lovleen

[Karsten Iwen · Accepted solution]

1) No, but you could send all logs to one server and this server forwards selected messages to another server.

2) You can disable selective messages:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa93/configuration/general/asa-general-cli/monitor-syslog.html#pgfId-1937538

[Vibhor Amrodia · Accepted solution]

Hi,

This would be possible with the fix for this enhancement:-

https://tools.cisco.com/bugsearch/bug/CSCun20291/?reffering_site=dumpcr

Thanks and Regards,

Vibhor Amrodia

[Lovleen Arora]

thanks

[Lovleen Arora]

thanks for your response