<div>
The IP addresses do appear in the ASDM logs, but it scrolls out of the buffer fairly quickly. &nbsp;I think you'll need a syslog server if you want to aggregate the logs over a long period of time. &nbsp;Any reason you can't just enable logging on the FTP server instead?
</div>


The IP addresses do appear in the ASDM logs, but it scrolls out of the buffer fairly quickly.  I think you'll need a syslog server if you want to aggregate the logs over a long period of time.  Any reason you can't just enable logging on the FTP server instead?

<div>
Logged to syslog server and filtered out the ASA code to locate.
</div>


Logged to syslog server and filtered out the ASA code to locate.

<div>
<div class="content wysiwyg-content">
Hi, on our ASA cisco 5510, I have a policy for our outside interface to allow FTP, FTP-DATA &amp;&nbsp;SSH to an external IP address. We then NAT this externalFTP address to an local internal server<br />
<br />
access-list outside_access_in extended permit tcp any host ExternalFTP object-group DM_INLINE_TCP_1<br />
<br />
static (inside,outside) ExternalFTP &nbsp;access-list inside_nat_static<br />
<br />
I am trying to come up with a list of which external IP's are actually connecting to this IP of ours..<br />
<br />
I can see we get about 20 hits every month<br />
<br />
Can this be done on the ASA logging or what is recommended?<br />
<br />
Thanks
</div>
</div>


Hi, on our ASA cisco 5510, I have a policy for our outside interface to allow FTP, FTP-DATA & SSH to an external IP address. We then NAT this externalFTP address to an local internal server

access-list outside_access_in extended permit tcp any host ExternalFTP object-group DM_INLINE_TCP_1

static (inside,outside) ExternalFTP  access-list inside_nat_static

I am trying to come up with a list of which external IP's are actually connecting to this IP of ours..

I can see we get about 20 hits every month

Can this be done on the ASA logging or what is recommended?

Thanks

ASA 5510 - Logging Firewall Hits

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).