Solved

Enabling syslog informational logging without seeing VPN teardowns

Posted on 2009-04-01
3
343 Views
Last Modified: 2012-05-06
Is there a way to setup syslogging on a pix or asa, so that my syslog server doesn't get flooded with VPN information?  Right now it is set to emergencies. Because when I use the informational type of logging, I get all of the VPN info.

I just want to see log ins, log outs, user changes etc etc.

Thanks in advance
0
Comment
Question by:dissolved
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 10

Accepted Solution

by:
stsonline earned 500 total points
ID: 24052629
The easiest way would be to configure the firewall to exclude certain messages by ID - check out this link on Cisco's web site:

http://www.cisco.com/en/US/docs/security/asa/asa80/system/message/logmsgs.html

0
 

Author Closing Comment

by:dissolved
ID: 31568638
can you give me an example command?
0
 
LVL 10

Expert Comment

by:stsonline
ID: 24188409
Sure... you enter the message ID you do NOT want to record one line at a time prefixed by the word 'no'. For example, if you don't care about a VPN client with no split-tunneling enabled and don't want to know when a Phase 1 retrans or keep-alive is received, you'd get into configuration mode and create four entries, one each for message ID 611301, 611302, 702204, and 715075:

no logging message 611301
no logging message 611302
no logging message 702204
no logging message 715075

0

Featured Post

IoT Devices - Fast, Cheap or Secure…Pick Two

The IoT market is growing at a rapid pace and manufacturers are under pressure to quickly provide new products. Can you be sure that your devices do what they're supposed to do, while still being secure?

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I recently had the displeasure of buying a new firewall at one of the buildings I play Sys Admin at. I had to get a better firewall than the cheap one that I had there since I was reconnecting the main office to the satellite office via point-to-poi…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.
Suggested Courses

626 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question