aryoba
Premium,MVM
join:2002-08-22
| Re: [Config] [PIX 501] Logging Issue You need to specify such ACL with "log" parameter in order for the syslog server to receive such log. Here is a Cisco link for more info:
»www.cisco.com/en/US/products/sw/···p1067755
Here is an illustration. Let's say you need to know which unapproved IP address that is trying to establish TCP connection. Then the command is something like this
access-list outside_access_in deny tcp any any log
Keep in mind that such deny ACL should be placed after the permit ACL. Otherwise all IP address (including the approved ones) would also be rejected. |
