ASA log management
one
Log levels are divided into eight categories
0 emergencies is very urgent
Alert urgent
Critical criticality
Error
Warning
Attention, notification.
Informational
7 debugging
two
Configuration
1) time zone
Config: clock timezone peking 8
2) time
Config: clock set 10:30:00 21 june 2013
3) configure LOG Buffer
Config: logging enable
Logging buffered informational log level
View: config: show logging
Clear log: config: clear logging buffer
4) configure ASDM log
Config: logging enable
Logging asdm informational
Clear the ASDM log: config: clear logging asdm
5) configure log server
Config: logging enable
Logging timestamp
Logging trap informational
Logging host inside 192.168.1.1 # # Log Server ip
ASA uses UDP port 514 to communicate with log server by default.
Firewall analyzer is a good firewall log analyzer.
