KIWIS SYSLOG Question- - Please Help!!

[JRMS]

I have been task with monitoring our PIX 525 along with failover. I found this shareware on the internet and have downloaded it on my WIN2K3 server. I am having problems configuring it. How do I have the SYSLOG server communicate with the firewall. Do I need to purchase the license to accomplish this. Will this utility provide system integrity checks of the firewall. If this is not the best shareware to use, please suggest another program. Your assistance will be GREATLY APPRECIATED.

 

[ridix]

Have you enabled logging on the PIX?
Have you specified your syslog server on the PIX?

kiwi syslog works well enough for us.

 

[JRMS]

I have not enabled syslog on the Pix nor specified the syslog server. Do you have any suggestions on how to do so.

 

[chicocouk]

Kiwisyslog's site has a links page with info about using their products. Linked from that page is a great introductory article about logging from a pix to Kiwi, and interpreting the logs. Find it here;

http://www.sans.org/rr/papers/index.php?id=199

CCNA, MCSE, Cisco Firewall specialist, VPN specialist, wannabe CCSP

 

[308win]

http://www.cisco.com/en/US/customer...erence_chapter09186a00801727a9.html#wp1028090

The two subcommands you need in particular are host and trap.

Something similar to this in your config

logging on
logging timestamp
logging trap notifications
logging host inside your.syslog.server.address

 

[JRMS]

Thanks for your help. I have made the Pix modification and install Kiwi as well. All is well. THANKS!!!!!!!!!!