« Build a router on Linux | Main | Three handy alias commands »

January 8, 2006

PIX Syslog

It seems to be PIX week here. I've had more requests for PIX configurations than anything! Anyhow, just a quick configuration to make a PIX correctly log to a SYSLOG server:

logging on
logging standby
logging timestamp
logging trap notifications (or warnings - notifications will send a ton of info)
logging facility 18
logging host inside/outside ip address

I also like to use the command logging device-id string name. This tags all messages in my syslog with an identifier so I know what device sent the message (by name rather than IP address).

Posted by JC at January 8, 2006 10:15 PM

Trackback Pings

TrackBack URL for this entry:
http://www.cioara.org/cgi-bin/mt-tb.cgi/37

Comments

Thanks JC,I also found the article at the firewallfaqs.com interesting
http://www.firewallfaqs.com/cisco-pix/PIX_Logging.htm

Posted by: jamie at March 3, 2007 12:07 AM

Post a comment




Remember Me?

(you may use HTML tags for style)