ASA Logging

Answered Question
Apr 1st, 2010

Does the ASA keep logs of SSL connections? If so, can I get history detail and go back as far as 2009?


What about remote access user detail?


Also, I’d like to automate the delivery of that logging  information into Splunk. What options do I have?


Thanks,

GLH

Correct Answer by Federico Coto F... about 6 years 10 months ago

Hello Greg,


In this case or any other case if you find the answer helpful, you can rate the answer by marking the question as correct.

This will also allow everybody else to know the resolution for this particular issue.


Thank you,

Federico.

Correct Answer by trippi about 6 years 10 months ago

Greg,

Don't forget to give Federico a good vote

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (5 ratings)
Loading.
Federico Coto F... Thu, 04/01/2010 - 15:04

Hi,


The ASA keeps logs of remote access connections.

You can't go back to 2009 unless you keep a syslog server with the log files.


The ASA by default log to its console, you can check them via a terminal session as well.

The ASA can log to its buffer, but there's a limit to the amount of logs, and the ASA will just re-write the old logs with the new ones.


Take a look at this link:


http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/monitor_syslog.html


Federico.

GREG HARPER Fri, 04/02/2010 - 06:39

Thanks Federico for the link and the information.  This helps a bunch!


glh

Correct Answer
trippi Fri, 04/02/2010 - 11:17

Greg,

Don't forget to give Federico a good vote

GREG HARPER Sat, 04/03/2010 - 09:20

Trippi -

Here is a dumb question how do I give him a vote? I logged in and couldn't

find where to vote.


Thanks,

Greg

Correct Answer
Federico Coto F... Sat, 04/03/2010 - 10:11

Hello Greg,


In this case or any other case if you find the answer helpful, you can rate the answer by marking the question as correct.

This will also allow everybody else to know the resolution for this particular issue.


Thank you,

Federico.

Actions

This Discussion