How do I configure remote syslog logging for a Cisco ASA Firewall

This article will walk through the steps to configure Cisco ASA firewalls to send syslog messages to the RocketAgent Syslog Server

Configure Basic Syslog with ASDM

This procedure demonstrates the ASDM configuration for all available syslog destinations.

  1. In order to enable logging on the ASA, first configure the basic logging parameters. Choose Configuration > Features > Properties > Logging > Logging Setup. Check the Enable logging check box in order to enable syslogs.

  2. In order to configure an external server as the destination for syslogs, choose Syslog Servers in Logging and click Add in order to add a syslog server.

  3. Choose the Appropriate Interface to send Syslog messages from.
  4. In the IP Address field, enter the IP address of the RocketAgent Syslog Server.
  5. Click on UDP
  6. Enter 514 in the Port field.
  7. Click Ok
  8. In order to enable logs to be sent to the RocketAgent Syslog Server, choose Logging Filters in the logging section. This presents you with each possible logging destination and the current level of logs that are sent to those destinations. Choose the Logging Destination for the RocketAgent Syslog Server (Syslog Servers) and click Edit

  9. Choose  Informational, from the Filter on severity drop-down list. Click OK when you are done.

  10. Click Apply after you return to the Logging Filters window.