Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

log server configuration for asa ssm20

hi i need to configure ips log server (asa ssm 20) .which software is capable to do the same and how

4 REPLIES
Cisco Employee

Re: log server configuration for asa ssm20

Concerning configuring SNMP on the sensor, I recommend doing this via

the IDM (https) method of configuring the sensor. You can find the

documentation on configuring SNMP via IDM here:

http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configura

tion_guide_chapter09186a00804cf4c9.html

Here's the SNMP configuration information from the CLI configuration

guide (it lists the MIBs you need for a third-party SNMP server, check

the end of the document for the MIB info):

http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configura

tion_guide_chapter09186a008055df87.html

Here's the link to the full IDM configuration guide:

http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configura

tion_guide_book09186a008055de07.html

Here's the link to the full CLI configuration guide:

http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configura

tion_guide_book09186a008055dbb1.html

Let me know if you encounter any problems with these procedures.

Please rate if this helps.

Sushil

Cisco TAC

New Member

Re: log server configuration for asa ssm20

hi,

thanks, but none of the above link is working

please suggest me.u can use phone also

Regards,

Sanjeev Bhardwaj

+91-9311755965

Cisco Employee

Re: log server configuration for asa ssm20

hi,

u clicked on the first line.there's some stuff below that too.please copy the full like n try...

Silver

Re: log server configuration for asa ssm20

If you are looking for sending IPS events from SSM module to a syslog server, unfortunately, thats not possible. IPS is not designed to send events to a syslog server. It works on RDEP protocol under which a event viewer server is supposed to pull the events from the IPS. So what actually you need is a Event Viewer. This can either pull the events realtime or based on the time duration. However, SSM module has very less amount of memory to store the events. So it would be better if we have a IEV which maintains a constant connection to the SSM module and pulls events frequently.

Regards,

Vibhor.

261
Views
0
Helpful
4
Replies