Cisco ASA Syslog Configuration

[lagapidis (Lazarus Agapidis)]

Hello Ayong

@aneba

• I understand that the logging recipient-address can be an individual but What will the logging-from address be? Do we configure the ASA to own an email address? and how? (I mean, who owns the asa@networklessons.com address in this case?)

In order to use this feature, you must also have an SMTP email server. In this case, the ASA is functioning as an email client. The SMTP server used in this configuration has an IP address of 192.168.1.1. The SMTP server should be set up to accept emails from the ASA without any password or other security information.

@aneba

• Is it possible to configure other devices to send their syslog messages to ASA1? and what will that command be?

No, the ASA cannot function as a Syslog server to receive the Syslog messages of other devices. The best practice is to set up a local Syslog server that will capture and maintain a database of the Syslog messages sent out by all of your devices. This will be much easier than parsing through logs on the devices or even emails. The email option is good for emergency level Syslogs, just so you can be informed of critical events, but in general, is more difficult to use for troubleshooting processes…

I hope this has been helpful!

Laz