cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
350
Views
10
Helpful
1
Replies

PIX 501 logging to linux

joel-metz
Level 1
Level 1

How do I Setup Linux to receive logging messages from my pix 501. I already have logging configured on the pix firewall. Any suggestions would be appreciated.

Joel

1 Reply 1

panlamture
Level 1
Level 1

Hi,

Syslog comes with linux by default, it's up and running when you first

start your system.

> What is the method to viewing logs on Linux?

you have a bunch of log files in /var/log... your syslog file is

/var/log/syslog (in SuSE is /var/log/messages)...

To view it on your console try to tail it:

tail -f /var/log/messages

(do a man tail to learn all options of the tail command).

> My first project is to set it up as a syslog security server.

I suppose you want a remote syslog server...

Mmmm... this one is a cool article on how to setup a remote log server:

http://www.linuxsecurity.com/feature_stories/remote_logserver-1.html

Hope this help

and also

For a cost effective way to generate a web-based output of your syslogs use fwlogwatch. Syslog to a linux server and use fwlogwatch to generate nice HTML based reports. It does the usual linux ipchains, iptables, and Cisco IOS and PIX logs.

http://cert.uni-stuttgart.de/projects/fwlogwatch/

Review Cisco Networking for a $25 gift card