NCM support for ASA real-time config changes

Question

Does the ASA generate a trap to send to the NCM to signal a config has changed ?

Specifically a CISCO-CONFIG-MAN-MIB (ciscoConfigManEvent)

I keep reading in various places that the config trap is only sent if there is a hardware config change.

Thanks,

Vic

naburleson · Answer

Just add a rule to your syslog server to look at the message type pattern of  "ASA-5-1110008" and of course send syslogs to NCM

chuco · Answer

Hey VIC,

Here are the codes the ASA sends for config changes

On the 8.2.2 IOS message type is via CLI ASA-5-111005, via ADSM ASA-5-111008 On the 8.2.1(11) IOS message type is via CLI %ASA-5-111005:,  via ADSM % ASA-5-111008: You have to set them up in the syslog server settings.

mcbridea · Answer

This reference states that it will send a trap upon a running config change.

http://supportwiki.cisco.com/ViewWiki/index.php/How_to_track_changes_of_the_device_configuration_using_SNMP