To check logs on asa firewall

Question

Hi Experts,
Need  a solution regarding broadcast.
There were lot of packet loss when i tired to ping inside interface of firewall.And my entire network was down.
When i checked in asdm there was DOS attack from particular ip  on of internal server .
Today also i faced a similar problem, And i was not able to even log on to asdm.
Is there any ways to check log on firewall other than syslog server

Answer 1

Hi
Just my 2 cents on the subject.
First of all are you onsite or are you somewhere else ?
It sounds like you are onsite and that the inside server is sending more packets through the link than what the firewall or the link somewhere to the firewall can handle. Ie Link saturation.
If that is the case then set a monitor port on the switch where the firewall connects and setting up a sniffer software such as wireshark will tell you the offending address immediately. It is the one sending most of the packets.
The second thing you can do is to go to the firewall and connect a cable and run CLI commands instead of using the ASDM.
Third
Do you have any unused ports in the firewall setting up a log server on one of those would be a prudent thing.
Forth
It could be a faulty cable, that would give the same problem symptoms, but if the ASDM tells you that there is an attack, then most likely it is not a faulty cable.
Good luck
HTH