Jugaad
join:2002-04-28
MARS!!
| reply to PixUser
Re: [Config] [PIX 501] Logging Issue
Message was not logged because the request was not trying to go THROUGH the PIX but it was trying to go TO the PIX. I don't see www port being redirected to inside on the PIX.
--
Not able to get online? Good!! Go out and meet friends  |
|
PixUser
@perr.blu | reply to aryoba
Added access-list outside_access_in deny tcp any any log and equally access-list outside_access_in deny ip any any log it makes no differance the same messages are still logged  |
|
aryoba
Premium,MVM
join:2002-08-22
| reply to PixUser
You need to specify such ACL with "log" parameter in order for the syslog server to receive such log. Here is a Cisco link for more info:
»www.cisco.com/en/US/products/sw/···p1067755
Here is an illustration. Let's say you need to know which unapproved IP address that is trying to establish TCP connection. Then the command is something like this
access-list outside_access_in deny tcp any any log
Keep in mind that such deny ACL should be placed after the permit ACL. Otherwise all IP address (including the approved ones) would also be rejected. |
|
