Sir, You can also configure the ASA to send log events via syslog, either directly to OSSEC or to the syslog daemon on the ossec server, so OSSEC can monitor that output as well.
Caveat: I am not very familiar with the remote monitoring but it is my understanding that this would only check the configuration and would not have access to the ASA's logs. thanks, Rick On Monday, December 8, 2014 11:55:30 AM UTC-5, Semperfi wrote: > > Hello; > > I would like to monitor our ASA 5510. Is there any documentation or > tutorial on monitoring an ASA ? > > I have found limited information and my understading. > > > > 1) I have to edit the register_host.sh, add the host.: if > so, Where? > > 2) edit ssh_asa-fwsmconfig_diff, with the password: is this > the SNMP pwd ? > > 3) Run ssh_asa-fwsmconfig_diff within \ossec > > > > Is this basically all there is to be done? > > > > Thank you for your help > > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
