cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
833
Views
0
Helpful
2
Replies
dmooregfb
Contributor

Tracking ASDM logins

I am wanting to track any admin user logon through ASDM to my syslog server. Can anyone help me with this? I am a ASA newbie with limited ASDM experience.

Do I need to setup a specific event class to syslogs on the Configuration --> Device Management --> Logging --> Logging Filters for ASDM?

Thanks,

2 REPLIES 2
Kent Heide
Beginner

The ASA logs by default user logons to syslog. You could also use accounting for this feature although that does not provide you with syslog functionality.

Hi,

Just configure in ASDM Logging Filter with severnity to informational and in syslog server to Notifications.Then check your messages are coming to syslog for login of any user account.

Hope that helps out your query !!

Regards

Ganesh.H

Create
Recognize Your Peers
Content for Community-Ad