Page Comparison

...

The following steps detail how Cisco ASA and Pix firewall logs can be sent to the CCE.  You have two options: Configure using the Command Line Interface or via the User Interface

1.1      Option 1: Configuring Cisco ASA using Command Line Interface

Telnet to the firewall and enter the enable mode

...

To verify your configuration, enter the show logging command after the last command above. This will list the current logging configuration on the firewall.

1.2  Option 2: Configuring Cisco ASA from the User Interface

Log in to the Cisco user interface, and follow the steps below to configure the firewall:

1.3  Enabling Logging

1. Select Configure > Settings > Logging > Logging Setup 
2. Select the Enable logging setup and Enable logging failover check boxes
3. Click Apply. 
   Changes are applied to the assigned firewall configuration files when they are generated. The configuration files are then downloaded to firewalls at deployment.

1.4  Configuring Syslog Server

1. Select Configure > Settings > Logging > Syslog
2. Check Include Timestamp.
3. Click Add to add a row.
4. In the Add Syslog Server page that appears, enter the following:
1. Interface Name - the firewall interface through which Firewall Analyzer can be reached, the interface can be either inside or outside.
2. IP Address - the IP address of the syslog server (CCE host IP Address) to which logs have to be sent
3. Under Protocol, select the UDP radio button
4. The default UDP port is 514. If you have configured a different syslog listener port on your syslog server, enter the same port here.
5. Click Apply

1.5      Configuring Logging Level

1. Select Configure > Settings > Logging > Other
2. Under Console Level List select Informational so that all report data is available
3. Click Apply