Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Log Management of ASA Firewall

2025-04-05 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)06/01 Report--

One of the most important functions of any firewall product is to log time, and ASA uses synchronous logging to record all times that occur on the firewall.

The security level of log information is divided into eight levels, as follows:

Configuration Log:

Log information can be output to log buffer (log buffer), ASDM, and log server.

Before configuring logs, you generally need to configure the time zone and time, and then configure log buffer, ASDM and log server respectively, as shown below:

Ciscoasa (config) # clock timezone beijing 8 # beijing is used to specify the name of the time zone. 8 refers to the offset from the international standard time. The value range is-23~+23ciscoasa (config) # clock set 13:12:00 30 april 2019 # configuration time, in the order of hours, minutes, seconds, day, month, and year.

Configure log buffer with the following command:

Ciscoasa (config) # logging enable ciscoasa (config) # logging buffered informational # configure informational level logs

The default size of log buffer is 4KB.

The command to view log buffer is as follows:

Ciscoasa (config) # show logging

The command to clear log buffer is as follows:

Ciscoasa (config) # clear logging buffer

Configure the ASDM log with the following command:

Ciscoasa (config) # logging enable ciscoasa (config) # logging asdm informational

The command to clear ASDM log buffer is as follows:

Ciscoasa (config) # clear logging asdm

Configure the log server:

At present, there are many log server software, it is recommended to use web-based firewall log analysis software: firewall analyzer 6, which supports Windows and Linux platforms.

Ciscoasa (config) # logging enableciscoasa (config) # logging timestamp ciscoasa (config) # logging trap informational ciscoasa (config) # logging host inside 192.168.1.1

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Network Security

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report