# Cisco ASA

## Cisco ASA 

Cisco ASA using Command Line Interface 

1. Telnet to the ASA firewall and enter the enable mode 
2. Type the following: 

`configure terminal` \
 \
`logging enable` \
 \
`logging timestamp` \
 \
`logging trap informational` \
 \
`logging device-id {context-name | hostname | ipaddress interface_name | string text}` \
 \
`logging host interface_name syslog_ip [udp/<syslog_port>]`&#x20;

| interface\_name           | is the interface on the ASA Firewall whose logs need to be analyzed (for example: "inside" or "outside").                                                                                                                                                                                                           |
| ------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| syslog\_ip                | is the IP address of the Log Collector to which the Firewall should send the Syslogs.                                                                                                                                                                                                                               |
| udp/\<syslog\_port>       | indicates that logs will be sent using the UDP protocol, to the [configured syslog port](https://www.manageengine.com/products/firewall/help/firewall-analyzer-prerequisites.html#port) on the syslog server. If left blank, logs will be sent to the default UDP port 514. Check Appendix A for default port list. |
| hostname                  | firewall's host name (defined with the hostname configuration command)                                                                                                                                                                                                                                              |
| ipaddress interface\_name | the IP address of a specific firewall interface named interface\_name (for example: "inside" or "outside")                                                                                                                                                                                                          |
| string text               | an arbitrary text string (up to 16 characters)                                                                                                                                                                                                                                                                      |
| context-name              | in PIX 7.x or FWSM 2.x operating in multiple-context mode, the name of the firewall context can also be sent.                                                                                                                                                                                                       |

##