Industrial Cybersecurity

Configuring the Cisco ASA firewall to send log data to the OSSIM server

These steps will help you configure the OSSIM server:

1. Connect to the ASA box using ASDM.
2. Go to Configuration | Device Management | Logging | Syslog Servers and click on the Add button to add a syslog server:

Make sure you have connectivity between the Cisco ASA and the OSSIM server.

3. In the Add Syslog Server dialog, specify the following:
   1. Interface associated with the server.
   2. OSSIM server IP Address.
   3. Protocol (TCP or UDP).
   4. The Port number depending on your network setup.
   5. Click on OK:

4. The new syslog server appears when you navigate to Configuration | Device Management ...