Hello Soren,Not sure if you've got the solution to this but I recently wrote a post on the same scenario that I wanted to implement. I did this with PIX but the syslog message ID is the same for the ASA (tested it).http://networkology.net/2014/06/29/...

Thanks for the solution to this!