Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

What to log?

Hi,

I've never worked with an ASA (5520) before but have managed to get it up and running and have everything configured. Tunnels are running, DMZ is working etc.

I set up a syslog server and what I'm struggling with now is what to log? I find it difficult to get a grip on what classes are important to log for security and usuage purposes. I'm hoping someone can point me in the correct direction and maybe give me some hints on what is important.

Thank you.

1 REPLY
Bronze

Re: What to log?

Cisco Security Monitoring, Analysis, and Response System (CS-MARS) provides real-time monitoring and incident response capabilities, which enable organizations to get the most value from the advanced inspection services of the Cisco ASA 5500 Series IPS Edition.

117
Views
0
Helpful
1
Replies
CreatePlease login to create content