Need some help on how to handle a 100+ site deployment with ASA5545x with SFR Modules being managed by FMC.
Each Site has it's own syslog server to handle each site and then replicate those logs up to our CORE data Centers.
Every site is very similar due to our IP structure, so we currently have one policy for all SFR's but due to security requirements we can't send all of those logs to the same syslog server as the FMC.
Do I need a specific Device Platform Policy for each site and then a specific Policy for every site to tell the local SFR to send to the local syslog server?
Is there a way to set the syslog log locally on the sfr and for it to not be overridden by any policy from the sfr?
First time I'm getting tossed into this for the FMC/FTD stuff.
