Keeping record of sessions got established on ASA5500

ccie16351 · ‎11-18-2007

Hi,

I need to have a record of the sessions got established on the ASA5500. I do not have Syslog server, yet. Therefore, I will keep this info. at the FW buffer.

My question is, what severity level is legitimate sessions got established from the Outside to Inside/DMZ.

Thanks

Sami

JORGE RODRIGUEZ · ‎11-18-2007

Sami, I would say severity level 6 for informational, but check the tables in this link to give you a better picture.

http://www.cisco.com/en/US/docs/security/asa/asa70/system/message/logsev.html

Also you know that you can save syslog buffer to ftp server, here are more details.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805a2e04.shtml#steps

HTH

Jorge

Jorge Rodriguez