Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

ASA Syslog SMTP transactions

I would like to know how to configure logging on the 7.2 ASA to create an audit trail for the mail server transactions that occur from my company to external mail servers. I am using a syslog server.

1 REPLY
Community Member

Re: ASA Syslog SMTP transactions

The easiest way would be to explicitly define an ACL matching your mail server outbound on tcp/25, and then add the log statement to the end. This should send you alerts.

173
Views
0
Helpful
1
Replies
CreatePlease to create content