kobe4president

Comments

  • Without getting too technical, like bkyle said, you have to know what it is you want to focus on. I have a couple of rules setup for my firewalls. One that simply dumps everything to log files, and another that looks for specific messages (i.e. User logins, command inputs), when those message IDs are found an email is sent…
    in Setting up a syslog server help.... Comment by kobe4president July 2016
  • I am definitely not a a RegEx expert, but this would be cool to do. Hopefully someone can chime in. Right now I just have my ASA email me when those type of messages are generated
    in Filter ASA messages with regex Comment by kobe4president July 2016
  • In Kiwi disable the ASA rule you created and create a rule with no filters and an Action to display. This way the console will display anything being sent to the server. Also, confirm that Windows Firewall is disabled or that there is a rule allowing traffic on udp/514
    in Can't setup syslog with a Cisco ASA 5505 Comment by kobe4president July 2016
Avatar