Cisco Pix: Logging syslog

[tommy916]

I have cisco pix 501 & 506E. I have not use the logging. I'm providing the dedicated servers on cisco pix. I want to be able to view the logging when there's problem on pix.

What kind of level do you recommend (alerts, critical errors, warnings) for console, monitor, history, trap?

What software (syslog server) do you recommend on Windows 2003? I don't know much about syslog. I would like a free version.

Thanks,
Tommy

 

[KiscoKid]

The PIX can generate a LOT of syslog entries. Previously, I've typically set my own PIX firewalls to something between errors or warnings. Even then you may be inundated with messages. A GOOD syslog server will allow you quickly search and report on the errors that really mean something to you

A LOT of people use Kiwi syslog. I have in the past - it was alright and did the job I needed at the time.

It's not as good as some of the chargeable software out there admittedly but try it and see what you think:

http://www.kiwisyslog.com/index.php

 

[intelwizrd]

I like the Kiwi Syslog. It works great. I also have a bunch of custom scripts that parse the messages out into custom fields in a sql db, which helps with reporting and research.

----------------------------
Josh
CCNA, MCSE 2003(in progress)