Good List of Events/Debugs to Send to syslog for ASA/IOS Firewalls

[mloraditch]

I'm looking for a good list of debugs to enable for both ASAs and IOS (ZBF) firewalls for logging to a syslog. We are trying to setup some basic log archiving for clients to be able to have something if a security event were to happen.

Thanks!

[rvarelac]

Hi mloraditch, 

It would depend of which feature you want to debug exactly, if you are looking  something general but detailed you can enabled the debugs at level 6.

Find below the logging configuration for your devices:

ASA

http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/monitor_syslog.html

IOS

http://www.cisco.com/c/en/us/td/docs/security/fwsm/fwsm31/system/message/fwsm_log/logconf.html

Hope it helps

-Randy- 

[Dennis Mink]

Personally, I would start logging a certain level and than cul it down.