Logging deny attempt

[d.thaker]

Hi,

Can anyone suggest me how do I can configure Syslog logging for Invalid logon attempt as well access-list deny attempt.I have put one acl permitting something but at the end default "deny any any " is there and I wanted to logg this deny any any attempt.

Thanking you in advance.

Regards,

Dilip Thaker

[umedryk]

You can change the logging level, this will get logged if you permit all logging.

[sajsoft]

Hi Dilip,

In PIX firewall if you want to log the invalid logon attempts & Acl deny attempts you need to change the logging level to informational .

Please refer the following link for cisco PIX syslog messages

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_system_message_guide_chapter09186a00801582af.html#wp1003913

This new feature is introduced in cisco router in IOS 12.3(4)T or 12.2(25)S ,which logs all the logon attempts .

Please refer these links

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123t/123t_4/gt_login.htm

Thanks

Saj