cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1167
Views
0
Helpful
2
Replies

Tracking ASDM logins

dmooregfb
Level 5
Level 5

I am wanting to track any admin user logon through ASDM to my syslog server. Can anyone help me with this? I am a ASA newbie with limited ASDM experience.

Do I need to setup a specific event class to syslogs on the Configuration --> Device Management --> Logging --> Logging Filters for ASDM?

Thanks,

2 Replies 2

Kent Heide
Level 1
Level 1

The ASA logs by default user logons to syslog. You could also use accounting for this feature although that does not provide you with syslog functionality.

Ganesh Hariharan
VIP Alumni
VIP Alumni

Hi,

Just configure in ASDM Logging Filter with severnity to informational and in syslog server to Notifications.Then check your messages are coming to syslog for login of any user account.

Hope that helps out your query !!

Regards

Ganesh.H