how to configure logging feature on Cisco ASA 5510 for particular IP from inside?

[vasanth77]

currently we are using ASA 5510 firewall, i want to monitor some of the static ip from our inside(internal )network for all services.

how could I do that in ASA 5510.help me to get done.

[nspasov]

Can you be a little more specific around "monitoring" What exactly are you trying to monitor/accomplish.

Thank you for rating helpful posts!

[vasanth77]

Actually we are using ASA 5510 as firewall and Squid as a proxy server for internet access restriction ,

LAN network we are using static ip address/

now i want to see old logs for some IP addresses from LAN ?

so that what should i configure in ASA firewall to capture the logs about that particular IP's,and what they are using ,what they have accessed?

guide me to do this?

[nspasov]

Ah OK, so:

1. Below is a link to a nice thread/document that outlines how to enable syslogs on the ASA:

https://supportforums.cisco.com/document/73511/how-enable-syslogs-asa

2. The ASA can only store a limited amount of logs locally (Based on the log buffer that you set). Thus, you should really look into a SIEM solution to maintain historical logs

I hope this helps!

Thank you for rating helpful posts!