how to get a pix to send traffic (syslog) down a vpn it has established?

[watcher60]

All,

I haven't come across any tech notes etc but I'd like to get all the pix firewalls in my organization to log to a central syslog server but this would mean them sending the messages down a vpn they have established for that site to the main central site. I've tried specifying to use the internal ip of the syslog server both logging host inside and outside but it doesn't seem to work. Can anyone shed any light on what needs to be done to the config?

thanks

Matt

[Patrick Iseli]

See this document:

Monitoring Cisco Secure PIX Firewall Using SNMP and Syslog Through VPN Tunnel:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094469.shtml

sincerely

Patrick

[nukeguzzle]

Are there any options for having a central management solution for PIX 501's?

[Patrick Iseli · Accepted solution]

Log Management =

1.) CS MARS :

http://www.cisco.com/en/US/products/ps6241/index.html

2.) A Syslog Server

Configuration Management =>

Cisco Security Manager :

http://www.cisco.com/en/US/products/ps6498/index.html

http://www.cisco.com/en/US/products/sw/cscowork/ps2330/index.html

PIX Device Manager

http://www.cisco.com/en/US/products/sw/netmgtsw/ps2032/index.html

sincererly

Patrick