Enable Logging - what it logs by default? (ASA / PIX)

[zurihananel]

Hi,

I'm trying to figure something out.

When I Enable Logging on ASA or PIX, what does it log exactly by default?

Does it log traffic of Permit Rules or just traffic of Deny Rules? (this is when default is selected in logging options in the rule itself).

Can the default logging behavior can be changed?

Thanks in advance!

Zuri

[brettmilborrow]

There are different logging levels that you are able to configure in order to log less information.

As part of the setup of the logging you want, you need to choose this level.

Each message has been assigned a default level, but you are able to change these levels on a per message basis.

Have a look at this page which explains everything (skip past the SNMP section at the top).

http://www.cisco.com/en/US/docs/security/asa/asa72/system/message/logconf.html

Good Luck!