Solved

Logging access to servers / hosts through the ASA or 2620XM

Posted on 2006-11-13
1
207 Views
Last Modified: 2010-04-17
Hello

I have an ASA5510 box and a Cisco 2620XM router.
I have a bunch of servers behind these devices.
I need to keep a log of who is connecting to what port. i.e.


source / date-time / port / destination

and keep at least 60 days worth of logs.

Is there an easy way of doing this either on the PIX or the Router?
0
Comment
Question by:eggster34
1 Comment
 
LVL 79

Accepted Solution

by:
lrmoore earned 500 total points
Comment Utility
You can log all connections through the ASA by enabling logging to an external syslog host and log "informational" level
It can generate 1Gb+ log files daily if you're not careful. Watch the logs and diable certain message #'s that are not required to be maintained (i.e. icmp requests, netbios packets ignored, etc)
Archive the log file daily (most syslog servers can do this automatically), and move the archives to a disk drive that gets backed up regularly.
Done.

http://www.kiwisyslog.com
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

The Cisco RV042 router is a popular small network interfacing device that is often used as an internet gateway. Network administrators need to get at the management interface to make settings, change passwords, etc. This access is generally done usi…
Shadow IT is coming out of the shadows as more businesses are choosing cloud-based applications. It is now a multi-cloud world for most organizations. Simultaneously, most businesses have yet to consolidate with one cloud provider or define an offic…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now