Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Pix ver 7 Logging query!!

Can anyone throw some light on the interaction between

1)ACE logging


2)Global logging trap

If i have logging trap warning and alos have log keyword in one of my ACE what will be interaction.Will one override the other

Pointers appreciated

Cisco Employee

Re: Pix ver 7 Logging query!!

Without any other options to the ACE log command, the ACe log (if it denies a connection) will issue a 106100 log message at the default level of 6 (informational). If you only have "logging trap" set to warning level (level 4) then you won't see these ACE log messages, just like you wouldn't see any other level 6 or 7 messages.

To have them sent to your syslog server you need to set trap level logging to 6.

New Member

Re: Pix ver 7 Logging query!!

SO i understand there is no interaction between the two and that i would have to have global trap at 6 then why would i have to do an ACE logging cos the global trap 6 would anyways send the same to destination syslog if configured.

In summary what is the benfit of ACE logging Vs global logging

Thanks any pointers appreciate