SA520 Syslog accounting?

Linksys, Netgear, sonicwall, ect. Webbase configurations for firewalls. Web filting traffic shaping.
Guest

SA520 Syslog accounting?

Post by Guest » Mon Aug 03, 2009 11:56 pm

I can seem to get a straight answer from techsupport. Does anyone know how to turn on accounting on the SA520?  I need that data for my network management software. Also, does anyone know when the next firmware upgrade is coming out?  There are some bothersome issues that I haven received a credible response on for over a week now that need to be fixed. If I can get these fixed - Im going to have to look at other devices. Finally - how can we find out what is going to be fixed in the next release?  -=Clark

Guest

Re:SA520 Syslog accounting?

Post by Guest » Tue Aug 04, 2009 12:29 am

Sa520 can send SYSLOGS on UDP port 514 to a server in the NOC as far  as I know.  Are you trying to figure out how to turn this on?  That is  on the admin guide I am sure. Do you have a case # to share someone may be able to follow up on the  details.  I  not famaliar with what you mean by accounting?  Is that  like an audit trail of access? Release note will be distributed when the new FW is released.  I don   think many people, except the QA test team, really have an idea on  when they will be done based on what they are finding.  It would not  be smart to promise dates for that reason. But that doc will specify  all closed bugs as and remaining known issues. On Jul 30, 2010, at 4:55 PM, "clarkboyd" <supportforums-donotreply@cisco.com

Guest

Re:SA520 Syslog accounting?

Post by Guest » Tue Aug 04, 2009 1:04 am

I have the logging going to my syslog server just fine.  However, it doesn include any packet sizes that is utilized to make percentages of various types of traffic per protocol. Heres an entry - UID=0 [firewall] LOG_PACKET[ALLOW] IN=SELF OUT=LAN SRC=192.168.75.1 DST=192.168.75.10 PROTO=TCP SPT=443 DPT=56410  Component: KERNEL But no packet size!  Cisco case #614981329.  Bluntly put - I have NEVER had this much trouble bringing a Cisco device online. The level of frustration may soon be insurmountable. Is there at least a generic date on when it will be out?!?  Im at a crossroads - the SA520 is not adequate for my business needs and I can wait several weeks for a fix. However, if we
e talking months - I need to evaluate other equipment.  What I like about the SA520:Its Cisco ..  and rack mountableRack mountableInexpensive URL filtering What I dislike about the SA520:Logging is not up to Cisco standards. [CRITICAL]Web user interface with no CL availableRedirect screen for the URL filtering is more of a TREND MICRO advertisementRedirect screen for the URL filtering is not configurable.The OIDs in SNMP seem to be off and don always work. If Cisco can fix the logging - I can wait for the other items.  -=Clark

Guest

Re:SA520 Syslog accounting?

Post by Guest » Tue Aug 04, 2009 1:45 am

I will help you with this.  I am home already (looooong week).  Can we  pick this up Monday? Steve DiStefanoTechnology Solutions Architect - SalesCisco SystemsResearch Triangle ParkNorth Carolina, U.S.A1.919.392.6219www.cisco.com/smb On Jul 30, 2010, at 5:47 PM, "clarkboyd" <supportforums-donotreply@cisco.com

Guest

Re:SA520 Syslog accounting?

Post by Guest » Tue Aug 04, 2009 2:20 am

Sure.  Monday would be fine. Hopefully, we can at least get the logging issued squared away.;  -=Clark

Post Reply