cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
507
Views
0
Helpful
4
Replies

log server configuration for asa ssm20

sanbhardwaj
Level 1
Level 1

hi i need to configure ips log server (asa ssm 20) .which software is capable to do the same and how

4 Replies 4

suschoud
Cisco Employee
Cisco Employee

Concerning configuring SNMP on the sensor, I recommend doing this via

the IDM (https) method of configuring the sensor. You can find the

documentation on configuring SNMP via IDM here:

http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configura

tion_guide_chapter09186a00804cf4c9.html

Here's the SNMP configuration information from the CLI configuration

guide (it lists the MIBs you need for a third-party SNMP server, check

the end of the document for the MIB info):

http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configura

tion_guide_chapter09186a008055df87.html

Here's the link to the full IDM configuration guide:

http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configura

tion_guide_book09186a008055de07.html

Here's the link to the full CLI configuration guide:

http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configura

tion_guide_book09186a008055dbb1.html

Let me know if you encounter any problems with these procedures.

Please rate if this helps.

Sushil

Cisco TAC

hi,

thanks, but none of the above link is working

please suggest me.u can use phone also

Regards,

Sanjeev Bhardwaj

+91-9311755965

hi,

u clicked on the first line.there's some stuff below that too.please copy the full like n try...

vitripat
Level 7
Level 7

If you are looking for sending IPS events from SSM module to a syslog server, unfortunately, thats not possible. IPS is not designed to send events to a syslog server. It works on RDEP protocol under which a event viewer server is supposed to pull the events from the IPS. So what actually you need is a Event Viewer. This can either pull the events realtime or based on the time duration. However, SSM module has very less amount of memory to store the events. So it would be better if we have a IEV which maintains a constant connection to the SSM module and pulls events frequently.

Regards,

Vibhor.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: