Cisco 5510 - ASA SSL / IPsec VPN Edition User Manual

1-14
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Logging
Configuring Logging
Generating Syslog Messages in EMBLEM Format to a Syslog Server
To generate syslog messages in EMBLEM format to a syslog server, enter the following command:
Generating Syslog Messages in EMBLEM Format to Other Output Destinations
To generate syslog messages in EMBLEM format to other output destinations, enter the following
command:
Command Purpose
logging host interface_name ip_address
{tcp[/port]|udp[/port]]
[format emblem]
Example:
hostname(config)# logging host interface_1 127.0.0.1
udp format emblem
Sends syslog messages in EMBLEM format to a syslog server
over UDP using port 514.
The format emblem keyword enables EMBLEM format
logging for the syslog server (UDP only). The interface_name
argument specifies the interface through which you access the
syslog server. The ip_address argument specifies the IP
address of the syslog server. The tcp[/port] or udp[/port]
keyword and argument pair specify that the ASA and ASASM
should use TCP or UDP to send syslog messages to the syslog
server.
You can configure the ASA and ASASM to send data to a
syslog server using either UDP or TCP, but not both. The
default protocol is UDP if you do not specify a protocol.
You can use multiple logging host commands to specify
additional servers that would all receive syslog messages. If
you configure two or more logging servers, make sure that you
limit the logging severity level to warnings for all logging
servers.
If you specify TCP, the ASA or ASASM discovers when the
syslog server fails and as a security protection, new
connections through the ASA are blocked. If you specify UDP,
the ASA or ASASM continues to allow new connections
whether or not the syslog server is operational. Valid port
values for either protocol are 1025 through 65535. The default
UDP port is 514. The default TCP port is 1470.
Note Sending syslogs over TCP is not supported on a
standby ASA.
Command Purpose
logging emblem
Example:
hostname(config)# logging emblem
Sends syslog messages in EMBLEM format to output
destinations other than a syslog server, such as Telnet or SSH
sessions.

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English