Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Sawmill Integration

Pardon if this is a bumb question, but how exactly does Sawmill "integrate" with the WSA? When creating a profile, where the logs? I would suspect on the WSA.

  • Web Security
8 REPLIES
New Member

Re: Sawmill Integration

Hi BigDave,
There are multiple options available when configuring Sawmill, I believe that the preferred option is to configure each WSA to push the logs to a remote server via FTP, this remote server could be the same system hosting Sawmill.
Doing it this way will ensure that there are the most up to date logs on the sawmill server. Or if you prefer you can configure Sawmill to FTP to the WSA and collect that way.

New Member

Re: Sawmill Integration

Staylor pretty much summed it up. The most common is to have each WSA push to the same FTP server. This FTP is typically the Sawmill server.

New Member

Re: Sawmill Integration

Thanks guys. I'll make it so.

Take Care!

New Member

Re: Sawmill Integration

What's the best way to "prepare" the WSA to send its logs to an external FTP server? I did see where they are stored on the appliance itself.

New Member

Re: Sawmill Integration

BigDave,

There isn't much that needs to be done. Just setup the access logs, under log subscriptions. You can change it to ftp to a server.

New Member

Re: Sawmill Integration

As opposed to what it says now? For instance, change ftp:///accesslogs to ftp:///accesslogs.

New Member

Re: Sawmill Integration

You just need to change it under "Retrieval Method" from

"FTP on "

to

"FTP on Remote Server"

New Member

Re: Sawmill Integration

Awesome. Thanks Josh. I also just pointed the Sawmill profile to the WSA's FTP server. For now at least. This was to just show the customer what it looked like. Tey are going to implement a remote FTP server.

176
Views
0
Helpful
8
Replies