cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
725
Views
0
Helpful
1
Replies

how to view logs in Cisco Ironport S390 on CLI

cyberops123
Level 1
Level 1

Hi

Does anyone know how to see the logs on CLI for specific website ?

We are doing SSL decryption and I would like to see if I can see username and password that I enter is visible on the logs in Ironport via CLI ?

so lets say I am trying to get logs from this url below ;

https://ucp.nordvpn.com/login/

I tried to use grep or tail but for some reason it didnt work !!!

 

Any suggestion would be appreciated !!!

1 Reply 1

balaji.bandi
Hall of Fame
Hall of Fame

Try below option:

 

Loging to S390 using admin or equalent account.

 

once you have prompt 

 

>grep

>1

>ucp.nordvpn.com

>Enter

>Enter

> Y

>Enter

 

From browser try using that site and you can see the logs. ( if the client passing the internet via this proxy)

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help