I'm having the same problem on a Cisco 2911 router where it's logging the ACL hits but they are not going to the syslog server. Other log messages such as configuration changes, ssh access are going to the syslog server. I've tried "ip access-list ...
They must have already been configured that way, because when I changed the option in ASDM (Configuration>Remote Access VPN>AAA/Local Users>AAA Server Groups) and used the Test authentication against the LDAP servers, it comes back successful right a...