syslog server on outside interface

[mahesh18]

Hi Everyone,

Need to confirm is it ok to send the syslog message if syslog server is behind outside interface of ASA?

As per current client setup I need to do this.

Also I do not need ACL for this as traffic is sourced from AS right?

Regards

MAhesh

[Maykol Rojas · Accepted solution]

Hello; 

I would say no. You can, but it is against any measure. Syslog protocol is unencrypted and goes over plain text. If someones taps in, they will be able to see all the information that the ASA is logging. 

It is possible, its not recommended without using encryption. 

Mike. 

[mahesh18]

Many Thank Mike!