cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
127
Views
0
Helpful
2
Replies

Cisco ASA User or system password changed

shalendra2
Beginner
Beginner

Hi Team,

               What is the syslog message id for User or system password changed event. I have this message %ASA-5-766009: CTS SXP: password changed. I'm not getting user name and who has changed password information.

Any other message do we have?

 

Regards,

Shalendra

 

2 Replies 2

Marvin Rhoads
Hall of Fame Community Legend Hall of Fame Community Legend
Hall of Fame Community Legend

The message you cite is specific to CTS SXP (Cisco Trustsec Security Exchange Protocol). It would normally be due to a downstream device being reconfigured to attempt to setup SXP with the ASA (or change an existing SXP setup).

I'm not sure a local user changing their password will cause a syslog event.

Thanks Marvin, Can you please confirm it.

 

 

Regards,

Shalendra

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers