Foundation Summary The "Foundation Summary" provides a convenient review of many key concepts in this chapter. If you are already comfortable with the topics in this chapter, this summary can help you recall a few details. If you just read this chapter, this review should help solidify some key facts. If you are doing your final preparation before the exam, this summary provides a convenient way to review the day before the exam.The syslog message facility in the Cisco PIX Firewall is a useful means to view troubleshooting messages and to watch for network events such as attacks and service denials. Syslog messages can be configured to be sent to the following:- PDM Log
- Console
- Telnet console
- Internal memory/buffer
- Syslog server
- SNMP management station
Common to all ways of viewing syslog messages is the message level, or severity. The level specifies the types of messages sent to the syslog host, as shown in Table 8-6.Table 8-5. Logging Severity Levels Level | Numeric Code | System Condition |
---|
Emergency | 0 | System unusable message | Alert | 1 | Take immediate action | Critical | 2 | Critical condition | Error | 3 | Error message | Warning | 4 | Warning message | Notification | 5 | Normal but significant condition | Informational | 6 | Information message | Debug | 7 | Debug message, log FTP commands, and WWW URLs | System log messages received at a syslog server begin with a percent sign (%) and are structured as follows: %PIX - level-message_number: message_text
You can set the level with the logging command so that you can view syslog messages on the PIX Firewall console, from a syslog server, or with SNMP. |