Integrating with Cisco ASA Firewall
Use the Command Line
Please log into the Cisco ASA firewall using the command-line interface. Start by entering the command below.
logging enable logging host <interface_name> <sensor_ip> udp logging permit-hostdown logging timestamp logging device-id hostname no logging emblem Tip: (If logging is enabled and you do not see any traffic check the logging buffered setting. It may need to be adjusted to "logging buffered informational".) Note: Emblem log format should be disabled.
The <interface_name> argument specifies the interface through which you access the Blumira sensor. The sensor_ip argument specifies the IP address of the Blumira sensor.
Note: Your ACL definitions must have a log tag associated with them or they will not log out traffic matches associated with them. See Cisco’s Configuring Logs for Access Lists.
This document provides information on how to configure syslog on the Cisco Adaptive Security Appliance (ASA) by using the Adaptive Security Device Manager (ASDM) graphical user interface.
If you are still not receiving logs from the Cisco ASA, Please ensure that Logging Filters for Syslog Server are configured to send “Severity: Informational” and that Emblem formatting is disabled.