cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
401
Views
0
Helpful
4
Replies

Login Notification

dexteroc1
Level 1
Level 1

I have two ASA 5520's and I would like to be alerted via email OR an entry to be recorded in the syslog whenever someone logs into the firewall. Is this possible and how would it be done.

Thanks.

1 Accepted Solution

Accepted Solutions

Collin Clark
VIP Alumni
VIP Alumni

You need to send to syslog, a minimum of level 6 (Informational) for authentication notifications to appear.

Hope that helps.

View solution in original post

4 Replies 4

Collin Clark
VIP Alumni
VIP Alumni

You need to send to syslog, a minimum of level 6 (Informational) for authentication notifications to appear.

Hope that helps.

I tried it but it logs way too many messages. Almost like being on Debug. I think I will go back to Warning before I run out of space for the logs.

Thanks.

you could setup filtering on your syslog and output authentication syslog info to a seperate window

for example with kiwi syslog see http://articles.techrepublic.com.com/5100-22_11-5194745.html

Check out this link and look for the E-mail Address and Use the Message List headings.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805a2e04.shtml

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: