Pix logging

Posted on 2007-07-20
Last Modified: 2010-05-18
I would like my pix to log packets blocked by an access-list and then be able to view them. How can I do this?
Question by:jaysonfranklin
    LVL 19

    Accepted Solution


    just add the "log" option at the end of your acl


    access-list fromoutside permit tcp any host x.x.x.x log

    The default logging level is 6 for acls so you can view the hits by:
    logging on
    logging console 6
    (monitors level 6 logs)

    If you want to do this all of the time - you are better of using a syslog server - like Kiwi syslog

    LVL 1

    Author Comment

    Cool. Thanks a lot. however, she i say sh log, i get a bunch of goobly gop. is there a command that will show me only logging from a specific access list. i dont care about all the other stuff. tearing down udp connections, etc.


    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    Suggested Solutions

    Have you experienced traffic destined through a Cisco ASA firewall disappears and you do not know if the traffic stops in the firewall or somewhere else? The solution is the capture feature. This feature was released in 6.2(1) and works in all firew…
    This article will cover setting up redundant ISPs for outbound connectivity on an ASA 5510 (although the same should work on the 5520s and up as well).  It’s important to note that this covers outbound connectivity only.  The ASA does not have built…
    how to add IIS SMTP to handle application/Scanner relays into office 365.
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now