Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Botnet logs

We just installed Botnet on our ASA firewalls.  Is there a way to have the botnet logs forwarded to email?  I've looked through all the settings and can't seem to find anything.  Thanks for the help.

3 REPLIES

Re: Botnet logs

They can go to syslog, and you can then have a daemon parse syslog and send it to you via email if you like. That's usually a scripted method we've used to achieve this.

New Member

Botnet logs

Create a logging event list (ASDM : Configuration/Logging/Event Lists)
Use Message IDs 338201-338202 and 338001-338004)

Then in Logging Filters, enable email and select the event list.

-Robert

New Member

Re: Botnet logs

I should add, I don't see how to set the SMTP credentials for email.  Anyone?
I added the ASA's IP into the SMTP server's trusted list and it works.

336
Views
0
Helpful
3
Replies