Monday, September 21, 2009

Cisco PIX / ASA Syslog

Basic recipe for Cisco PIX logging to a syslog server or Kiwi Syslog:

logging on
logging timestamp
logging trap notifications
logging host inside

If you are logging across a VPN tunnel, you must add:

management-access inside

The trap levels that can be used are:

0 Emergency
1 Alert
2 Critical
3 Error
4 Warning
5 Notification
6 Informational
7 Debug

Cisco recommends level 3 for production use and 7 for debugging.

To ensure that your timestamps are accurate:

clock timezone EST -5 <--- EST is a timezone name of your choosing
clock summer-time EST recurring 2 Sunday March 2:00 first Sunday November 2:00

No comments:

Post a Comment