ASA 5520 resolve IP's in log?

shortnathan · ‎03-26-2008

Hi,

We've recently migrated on to an ASA 5520 from a Nokia Checkpoint. On the checkpoint when you were watching traffic on the GUI, it had the ability to do lookups on the outside IP address and display the host names in the log. For instance, you could watch the firewall and see who was doing the naughty surfing and that sort of thing.

On the ASA, it is just a bunch of IP addresses so nothing catches the eye when you're watching it. Is there any way to make the ASA display host names like the Checkpoint?

husycisco · ‎03-26-2008

Hi Nathan

Actually, what you want is not possible with syslog and in ASA itself.

"you could watch the firewall and see who was doing the naughty surfing and that sort of thing"

You can achieve this and more with integrating Websense. It also gives detailed information about URL surfing, categorizes URL traffic and creates a productivity chart.

Regards