Regarding E-mail alerts

[Janardhan Meesala]

Hi,

I configured one ASA 5510 firewall with CSC-SSM-10 in one of my customer location.

Here i want configure my firewall to send email alerts to particular mail ID, if anybody any access my network from outside( Like VPN users).

Please how to configure this setup and what are the pre-requsties for doing this?????

Regards,

Janardhan

[Julio Carvajal]

Hello Janardhan,

You can configure the ASA to send Syslog messages via email when xxx action happens.

Logging enable

logging list Outside_In_alerts message xxxxx

logging list Outside_In_alerts message xxxxx

logging list Outside_In_alerts message xxxxx

logging list Outside_In_alerts message xxxxx

Logging mail Outside_In_alerts

logging recipient-address destination@xxx.com
logging from-address xxx@example.com
smtp-server xxx.xxx.xxx.xxx ( you will need a SMTP server when you send the syslog messages in e-mails)

You will need to define the syslog messages you want to monitor (Access-list deny a packet on the outside interface, no xlate for inbound connections,etc)

Here are two documents you can use to understand this on a better way:
1-Syslog messages ID
http://www.cisco.com/en/US/docs/security/asa/asa80/system/message/logsevp.html
2-Syslog configuration on your ASA
http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/monitor_syslog.html#wp1064823
 
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805a2e04.shtml

Let me know if this is what you are looking for,

Please rate helpful posts,

Regards,

Julio!!