Logging ACL entry to Syslog server

[networker99]

I have a simple access-list configured on the outside of an ASA

access-list outside_in permit tcp any host x.x.x.x eq 80

access-list outside_in permit tcp any host x.x.x.x eq 443

access-list outside_in deny ip any any

Could someone please post a sample config showing how I can log all entries that hit the deny statement, and send them to a syslog server?

Thanks in advance

[varrao]

Hi,

You just need to add a "log" key word after the ACL and then it would be sent to your syslog server.

access-list outside_in deny ip any any log

Hope that helps,

Thanks,

Varun