CSM 4.5 Event Manager for IOS firewall on routers?

[mattleayr]

Hi,

Can anyone confirm fo me whether it's possible to send syslog messages from routers running IOS firewall feature set to CSM, so that the events appear in CSM Event Manager, similar to the way that ASA's do?

I've setup one of my routers to do this and have confirmed using wireshark that the syslog packets are received on the CSM 4.5 machine, but they don't seem to turn up in Event Manager.

This would be an extremely useful feature if I can get it to work!

Thanks,

Matt                  

[a.champigneulle]

Cisco IOS router are not supported with Event Manager :

http://www.cisco.com/c/en/us/td/docs/security/security_management/cisco_security_manager/security_manager/4-5/compatibility/information/csmsd450.html

[alexdelangel]

Hello friends,

Please, allow me to resurect this old post. 

I have already installed CSM 4.4 and I am already managing an ASA through CSM. I have configured CSM according to next the User Guide.

http://www.cisco.com/c/en/us/td/docs/security/security_management/cisco_security_manager/security_manager/4-4/user/guide/CSMUserGuide_wrapper/evntchap.html

I am not able to see the Events in the Event viewer client. Would you give me an advise about how to troublehoot that?

Regards!

[a.champigneulle]

Hi,

If you have followed the step in the user guide (Configuring ASA and FWSM Devices for Event Management), I don't know why you can't see the events.

Have you used a packet capture on your CSM server to check you indeed recieved the syslog messages ?