IPS Logs to Syslog

[ummerishtiaq]

We are using IPS Modules AIP SSM 20 in ASA 5520 and software based IPS in 5525-X.

We want to send their logs to an external syslog server. Is that possible ?

Currently IME is managing all the alerts and notifications via emails.

But our requirement is to get IPS logs in external Syslog Server.

[Marvin Rhoads]

Sorry but the classic Cisco IPS such as you have only support export via Cisco's proprietary SDEE transport method.

IPS intrusion events on those platforms cannot be sent out by syslog. The reason I've heard why is because UDP is deemed unreliable and insecure for security management.

[ummerishtiaq]

Thanks for the clarification.

So is there anyway we can be aware of when someone tries to login to the IPS, do login logs being made for success or denied attempts ?