cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

3612
Views
0
Helpful
3
Replies
rizwan.corvit
Beginner

URL Logging (Internet Browsing) in ASA

Hi,

I have Cisco ASA 5520 and want to use any syslog server for logging of URL traffic passing through ASA firewall surffing by coorporate end users. Could any one please share with me how to configure ASA for URL logging on syslog server. so that i can log any user activity with website address with user ip address or hostname logged in syslog server.

Thanks in Advance !

Rizwan Haider Siddiqui

3 REPLIES 3
Anu M Chacko
Cisco Employee

Hi Rizwan,

Here is how you can do this:

logging trap 7

logging host

logging on

On the syslog server, you will see syslogs with the IP addresses of the source IP and the destination IP.

Please refer to the following link for any doubts:

http://www.cisco.com/en/US/docs/security/asa/asa72/system/message/logconf.html#wp1106984

This one walks you through on how to configure syslogging using ASDM.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805a2e04.shtml#steps

Hope this helps!

Regards,

Anu

P.S. Please mark the question as resolved if it has been answered. Do rate helpful posts.

rmavila
Cisco Employee

Hi Rizwan,

You can have inspect http enabled on the firewall. This will enable  304001 syslog message which logs the URL accessed. The syslogs can be sent to a server as mentioned in the above post.

--

Rahul

P.S. Please mark the question as resolved if it has been answered. Do rate helpful posts.

Hello Anu & Rahul for your effective and prompt reply.

let me configure and apply these step for my required functionalitly. In case of any problem i will let you know.

thank you so much.

Rizwan Haider Siddiqui

Content for Community-Ad