Cisco ASA -- Include domain name in URL for system log

Unanswered Question
Mar 15th, 2010

I am logging to MARS from a Cisco ASA 5520 and read somewhere (can't remember where) that you can configure the ASA to include the domain name in the accessed URL (instead of just IP) of the log entries.  This is the data I need logged to MARS.  One site said you needed to enable web filtering to do this, but everything I've found on web filtering is actually URL filtering (using websense).  I've been searching, but keep coming up with nothing.  Any help is appreciated.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Collin Clark Mon, 03/15/2010 - 09:56

AFAIK, the ASA can not do this. You probably wouldn't want it too anyway, the overhead of the lookup would be pretty taxing on the device.

Hope it helps.

Kureli Sankar Mon, 03/15/2010 - 20:51

With the resolution of this defect CSCsw6851, when http inspection is enabled the syslog 304001 will now log the host name instead of the ip address.

This is resolved in 008.002(001.010)          008.001(002.014)          008.000(005)          008.000(004.024)

-KS

Actions

This Discussion