| Author |
Message |
JC
Guest
|
Posted:
Thu Dec 15, 2005 8:31 am Post subject:
PIX Syslog |
|
|
Hello all,
My issue is that I cannot seem to configure pix525/7.0(2) to send syslog to
a remote host. To the best of my knowledge I have config it correcly:
logging enable
logging host ISP 10.0.0.129
the pix always gives me this when I apply the logging host command:
WARNING: interface ISP security level is 50.
Syslog logging: enabled
Facility: 18
Timestamp logging: disabled
Standby logging: disabled
Deny Conn when Queue Full: disabled
Console logging: disabled
Monitor logging: disabled
Buffer logging: disabled
Trap logging: disabled
History logging: disabled
Device ID: disabled
Mail logging: disabled
ASDM logging: disabled
but I cannot find out what this means exactly. I feel that this could
possibly be the source of my problem, however I cannot find anything
definitive on the web about it. I have used tethereal on my syslog host in
order to verify that syslog messages are reaching the system, they are not.
I get messages from other hosts, but not the pix.
Does anyone have any suggestions?
Thanks
JC |
|
| Back to top |
|
 |
Guest
|
Posted:
Thu Dec 15, 2005 9:21 am Post subject:
Re: PIX Syslog |
|
|
Looks like the missing config statement is:
logging trap <level>
a show logging will then look something like:
Syslog logging: enabled
Facility: 20
Timestamp logging: enabled
Standby logging: disabled
Deny Conn when Queue Full: disabled
Console logging: disabled
Monitor logging: disabled
Buffer logging: level critical, 201933586 messages logged
Trap logging: level debugging, facility 20, 3390386233 messages
logged
Logging to inside syscollector errors: 0 dropped: 0
History logging: disabled
Device ID: disabled
Mail logging: disabled
ASDM logging: disabled
------------------------------------
Scott Pilkinton
http://tech.scottp.net
JC wrote:
| Quote: | Hello all,
My issue is that I cannot seem to configure pix525/7.0(2) to send syslog to
a remote host. To the best of my knowledge I have config it correcly:
logging enable
logging host ISP 10.0.0.129
the pix always gives me this when I apply the logging host command:
WARNING: interface ISP security level is 50.
Syslog logging: enabled
Facility: 18
Timestamp logging: disabled
Standby logging: disabled
Deny Conn when Queue Full: disabled
Console logging: disabled
Monitor logging: disabled
Buffer logging: disabled
Trap logging: disabled
History logging: disabled
Device ID: disabled
Mail logging: disabled
ASDM logging: disabled
but I cannot find out what this means exactly. I feel that this could
possibly be the source of my problem, however I cannot find anything
definitive on the web about it. I have used tethereal on my syslog host in
order to verify that syslog messages are reaching the system, they are not.
I get messages from other hosts, but not the pix.
Does anyone have any suggestions?
Thanks
JC |
|
|
| Back to top |
|
 |
JC
Guest
|
Posted:
Fri Dec 16, 2005 12:02 am Post subject:
Re: PIX Syslog |
|
|
money...
thx
<scottpdotnet@gmail.com> wrote in message
news:1134618606.323789.149910@g47g2000cwa.googlegroups.com...
| Quote: | Looks like the missing config statement is:
logging trap <level
a show logging will then look something like:
Syslog logging: enabled
Facility: 20
Timestamp logging: enabled
Standby logging: disabled
Deny Conn when Queue Full: disabled
Console logging: disabled
Monitor logging: disabled
Buffer logging: level critical, 201933586 messages logged
Trap logging: level debugging, facility 20, 3390386233 messages
logged
Logging to inside syscollector errors: 0 dropped: 0
History logging: disabled
Device ID: disabled
Mail logging: disabled
ASDM logging: disabled
------------------------------------
Scott Pilkinton
http://tech.scottp.net
JC wrote:
Hello all,
My issue is that I cannot seem to configure pix525/7.0(2) to send syslog
to
a remote host. To the best of my knowledge I have config it correcly:
logging enable
logging host ISP 10.0.0.129
the pix always gives me this when I apply the logging host command:
WARNING: interface ISP security level is 50.
Syslog logging: enabled
Facility: 18
Timestamp logging: disabled
Standby logging: disabled
Deny Conn when Queue Full: disabled
Console logging: disabled
Monitor logging: disabled
Buffer logging: disabled
Trap logging: disabled
History logging: disabled
Device ID: disabled
Mail logging: disabled
ASDM logging: disabled
but I cannot find out what this means exactly. I feel that this could
possibly be the source of my problem, however I cannot find anything
definitive on the web about it. I have used tethereal on my syslog host
in
order to verify that syslog messages are reaching the system, they are
not.
I get messages from other hosts, but not the pix.
Does anyone have any suggestions?
Thanks
JC
|
|
|
| Back to top |
|
 |
|
|
|
|