Email alert on asa for successful login to ASA

aminulnt · ‎06-09-2010

Hi guys,

Can any one tell how to configure the ASA with email alerts for successful login toASA using telnet, Ssh or asdm.

Thanks,

Panos Kampanakis · ‎06-09-2010

The following config will send an email for when a user logs in

logg enable

logging list login-list 605005

logging mail 6 login-list

logging from-address xxx-001@example.com

logging recipient-address admin@example.com

smtp-server

Here is the guide that explains the commands http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/monitor.html#wp1065512 and here is the syslog %PIX|ASA-6-605005: Login permitted from source-address/source-port to

interface:destination/service for user "username"

I hope it helps.

PK

aminulnt · ‎06-10-2010

Hi Pk

Thanks for your valuable information. I am going to configure email alert on my system. Can you tell me both (logging from-address xxx-001@example.com, logging recipient-address admin@example.com) mail address should be the same domain or can I use only one mail address for from and recipient from like alex@cisco.com and recipient alex@cisco.com

Or from alex@cisco.com and recipient networkadmin@cisco.com

Any assistance you can provide is greatly appreciated.

Thanks,

Aminul

Panos Kampanakis · ‎06-10-2010

The domain doesn't matter.

As long as the smtp server accepts the from and to it will work.

I hope it is clear.

PK

aminulnt · ‎06-10-2010

Greatly appreciated your comments

Panos Kampanakis · ‎06-10-2010

Please rate helpful posts.

PK