Does Cisco have a software or appliance can records NAT information?

[Hele Du]

Hi experts,

here is a governmental rule in our country,  it must be provide at least 90 days NAT logs(or called source trace) if the market or hotel provide internet services.

I just want to know, does any cisco device can support this ?

The ASA or firepower with internal disk and ISE?

Thanks a lot.

[Marvin Rhoads · Accepted solution]

Sure ASAs will log all NAT actions they take. Also all connection records - assuming you have logging enabled at the correct level.

You would need to send your syslog events to an external server for historical archiving.

See something like what this thread suggests:

https://supportforums.cisco.com/discussion/12515061/show-nat-tranlations-asa

[Hele Du]

Hi Marvin,

I think It hard to read if I am using native CLI command for customer....

I suggest customer to buy a external syslog server for this.