Monitoring SMTP on an ASA 5500

[wrightsreprints]

I have an ASA 5500 Firewall. I need to figure out how to log all events using Port 25 to determine if there are any rogue devices on our network. I was trying to figure out how to do this via the Real-Time Monitoring (filter) but have had no success. Any assistance on this would be appreciated.

[Jeff Van Houten]

How about a rule that says source inside network destination external service smtp log

Sent from Cisco Technical Support iPad App

[Dylan Brereton]

Hi,

I am having a similar issue... Can you elaborate on your suggestion above please? What rule would I add to my 5510 in order to catch any SMTP logs from unauthorized mail hosts?

Thanks,