I think dan mentioned it all - but basically... Run the register_host.sh and plug in your username@host password enablepassword
Step 1 e.g. ./register_host.sh [email protected] password enablepassword Steps 2 and 3 in your list are incorrect. Delete those... Edit the ossec.conf and add/edit <agentless></agentless> section e.g. <agentless> <type>ssh_pixconfig_diff</type> <frequency>36000</frequency> <host>[email protected]</host> <state>periodic_diff</state> </agentless> Then restart ossec. /var/ossec/bin/ossec-control -restart Someone also mentioned syslog to capture all the setup and teardowns... along with other useful information. I highly recommend configuring that as well!!! Good luck! Let us know how you are doing!! On Monday, December 8, 2014 8:55:30 AM UTC-8, Semperfi wrote: > Hello; > > I would like to monitor our ASA 5510. Is there any documentation or > tutorial on monitoring an ASA ? > > I have found limited information and my understading. > > > > 1) I have to edit the register_host.sh, add the host.: if > so, Where? > > 2) edit ssh_asa-fwsmconfig_diff, with the password: is this > the SNMP pwd ? > > 3) Run ssh_asa-fwsmconfig_diff within \ossec > > > > Is this basically all there is to be done? > > > > Thank you for your help > > > On Monday, December 8, 2014 8:55:30 AM UTC-8, Semperfi wrote: > > Hello; > > I would like to monitor our ASA 5510. Is there any documentation or > tutorial on monitoring an ASA ? > > I have found limited information and my understading. > > > > 1) I have to edit the register_host.sh, add the host.: if > so, Where? > > 2) edit ssh_asa-fwsmconfig_diff, with the password: is this > the SNMP pwd ? > > 3) Run ssh_asa-fwsmconfig_diff within \ossec > > > > Is this basically all there is to be done? > > > > Thank you for your help > > > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
