Email Alert HelpHi,
Can I set up an alert to email me when a ssh session is initiated onto a node.
The node being a Cisco ASA?
Any help greatly appreciated.
Thanks
There are a few options you could look at.
Thanks for the response.
Syslogs are configured on the ASA so I will look at creating the alert on the syslog viewer on the NPM side.
I’ll report back as to how I get on.
Thanks again
Colin
Hi.
As suggested I have set up an alert on the syslog viewer on NPM to alert me when an a user enters the enabled state on the firewall. But there are no entries in the logs to show ssh connections / authentication.
On the firewall logging set up is as follows.
Logging trap notifications
Logging asdm informational
Do I need to change
Logging trap debugging
to get these ssh login messages into the syslogs?
Or is there a different command.
Hi Colin,
I'm afraid I wouldn't know for sure which level of logging you need to configure in order to get the ssh logins into the syslogs
From reading this guide..
http://www.ciscopress.com/articles/article.asp?p=424447&seqNum=2
...I don't think debug level will be necessary and would likely cause you to receive a lot of 'noise' in the syslog viewer.
Perhaps you could verify with the required config with Cisco or via their forums?
Ciaran
Hi,
All now sorted & alerts are being emailed.
Many thank for your help.