Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Can I log smtp attempts on a ASA 5505

Posted on 2009-04-17
5
Medium Priority
?
588 Views
Last Modified: 2012-05-06
I have an ASA 5505 that I am using as a firewall.  I just set it up and I know that one of the computers in my network is sending out spam.  I believe that I know which computer is sending it, but I am not sure how to verify that it is this computer.  Can I do any logging with the ASA to figure this out?
0
Comment
Question by:ryan80
  • 3
  • 2
5 Comments
 
LVL 6

Expert Comment

by:ged125
ID: 24171337
The quickest way would be to load Adaptive Security Device Manager (ASDM) on the flash of the firewall and then look at this through the GUI interface.

If you have a CCO login, you can download ASDM here:
http://www.cisco.com/cgi-bin/Software/Tablebuild/doftp.pl?ftpfile=cisco/crypto/3DES/ciscosecure/asa/customer/asdm-613.bin&app=Tablebuild&status=showC2A

Documentation can be found here:
http://www.cisco.com/en/US/products/ps6121/index.html
0
 
LVL 12

Author Comment

by:ryan80
ID: 24171997
I have ASDM loaded.  Where would I look to be able to see traffic specifically on port 25?
0
 
LVL 6

Expert Comment

by:ged125
ID: 24172019
I have SDM in front of me, so it may differ slightly from ASDM.  I go to the monitoring section and look at the firewall sessions.  It shows me all active connections with protocol, port, source and destination IP addresses.  I will try to post a screen shot shortly.
0
 
LVL 6

Accepted Solution

by:
ged125 earned 2000 total points
ID: 24172046
See Below:

Monitor > Firewall Status > Pick the Zone Pair > Click "Start Monitoring"

Does that work on ASDM?
SDM.jpg
0
 
LVL 12

Author Closing Comment

by:ryan80
ID: 31571625
I am using ASDM version 5.2, so I may need to update it to get some more functionality.  there is not a firewall section under monitoring. I will just parse the logs to see if anything is hitting port 25.  Its my first time really using ASDM or a ASA so I'm just trying to make sure that I wont miss anything.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

On Feb. 28, Amazon’s Simple Storage Service (S3) went down after an employee issued the wrong command during a debugging exercise. Among those affected were big names like Netflix, Spotify and Expedia.
This article explains the fundamentals of industrial networking which ultimately is the backbone network which is providing communications for process devices like robots and other not so interesting stuff.
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Suggested Courses

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question