Cisco 5510 - ASA SSL / IPsec VPN Edition User Manual

1-10
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring NetFlow Secure Event Logging (NSEL)
Configuration Examples for NSEL
The following example shows how to display the flow-export template configuration:
hostname (config)# show running-config flow-export template
flow-export template timeout-rate 1
The following example shows how to display flow-export syslog messages:
hostname# show logging flow-export-syslogs
Syslog ID Type Status
302013 Flow Created Enabled
302015 Flow Created Enabled
302017 Flow Created Enabled
302020 Flow Created Enabled
302014 Flow Deleted Enabled
302016 Flow Deleted Enabled
302018 Flow Deleted Enabled
302021 Flow Deleted Enabled
106015 Flow Denied Enabled
106023 Flow Denied Enabled
313001 Flow Denied Enabled
313008 Flow Denied Enabled
710003 Flow Denied Enabled
106100 Flow Created/Denied Enabled
The following example shows how to display current syslog message settings:
hostname (config)# show running-config logging
no logging message 313008
no logging message 313001
Configuration Examples for NSEL
The following examples show how to filter NSEL events, with the specified collectors already
configured:
• flow-export destination inside 209.165.200.2055
• flow-export destination outside 209.165.201.29 2055
• flow-export destination outside 209.165.201.27 2055
Log all events between hosts 209.165.200.224 and hosts 209.165.201.224 to 209.165.200.230, and log
all other events to 209.165.201.29:
hostname (config)# access-list flow_export_acl permit ip host 209.165.200.224 host
209.165.201.224
hostname (config)# class-map flow_export_class
hostname (config-cmap)# match access-list flow_export_acl
hostname (config)# policy-map flow_export_policy
hostname (config-pmap)# class flow_export_class
hostname (config-pmap-c)# flow-export event-type all destination 209.165.200.230
hostname (config-pmap)# class class-default
hostname (config-pmap-c)# flow-export event-type all destination 209.165.201.29
hostname (config)# service-policy flow_export_policy global
Log flow-create events to 209.165.200.230, flow-teardown events to 209.165.201.29, and flow-denied
events to 209.165.201.27:
hostname (config)# policy-map flow_export_policy

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English