Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ASA Email Logging Source Interface

I've got email logging for a few specific syslog messages working and sending to an email server on the inside network.  However, the source IP ends up being the DMZ interface.  Is there a way to force it to use the inside IP instead?

ASA Code Version 7.22

Inside Interface IP:  10.104.36.4  Mask:255.255.255.0

DMZ IP: 10.100.20.1  Mask:255.255.255.0

SMTP Server IP: 10.100.10.100 

Logging commands in config:

logging enable

logging list email-alerts message 106100

logging mail email-alerts

logging from-address ASA@xyz.com

logging recipient-address tgw@xyz.com level debugging

Thank you.

3 REPLIES
Gold

ASA Email Logging Source Interface

Hi Terry,

The ASA will automatically select the source interface based on the routing table, which is not a configurable option. This is by design as the ASA will only allow communication to an interface from hosts behind that same interface. In other words, the server won't be able to reach the inside interface if it is behind the DMZ interface.

-Mike

New Member

ASA Email Logging Source Interface

I should have secified in my original post - the mail server is behind the inside interface not the DMZ.

ASA Email Logging Source Interface

Hello Terry,

So is the SMTP server on the inside??

Can you provide a show route from your asa?

Regards,

Julio

Looking for some Networking Assistance? Contact me directly at jcarvaja@laguiadelnetworking.com I will fix your problem ASAP. Cheers, Julio Carvajal Segura http://laguiadelnetworking.com
645
Views
0
Helpful
3
Replies