syslog causes firewall to stop

[freeb26]

Hi

For some odd reason when the firewall is not able to send logs to the syslog server it no longer allows traffic. How do I setup logging without this happening?

 

[tbissett]

Are you using syslog via TCP? That is the way it works when sending TCP syslog. Instead, try using the standard UDP/514 as the protocol/port.

 

[criticalUpdate]

here's a note from the PFSS documentation from Cisco

2. If a PIX Firewall is set to send messages via TCP and if the Windows NT partition containing the log files becomes full, PFSS causes the PIX Firewall to stop all connections until the Windows NT disk space is freed.

Jeff