syslogging from a branch to corporate through the VPN

mgeneral · ‎11-02-2001

How would you go about capturing syslog messages from a branch PIX (pix 506) which has a site-to-site VPN connection to our corporate office running a pix 515UR? I believe I can have the 506 send the syslog messages in the clear through the net, but my syslog server is on my inside network, and I don't want to create a static/conduit to expose it. Rather, I would like the 506 to send the syslog messages through the VPN tunnel to my protected server.

Is this possible? Anyone have any advice?

Thanks

brford · ‎11-03-2001

It is possible. Take a look at using TCP Syslog on the PIX, rather than standard UDP.

Brian Ford | brford@cisco.com | brford@yahoo.com | 51 75 61 6c 69 74 79 20 6d 65 61 6e 73 20 64 6f 69 6e 67 20 69 74 20 72 69 67 68 74 20 77 68 65 6e 20 6e 6f 20 6f 6e 65 20 69 73 20 6c 6f 6f 6b 69 6e 67 2e | Email me when you figure this out.

mgeneral · ‎11-03-2001

The problem with TCP syslog, as I understand it, if it fails to successfully log messages to the syslog server, the firewall will quit passing traffic. Is that not the case?