View dropped packets

[agentpineapple]

Hi,
I'm new to ASAs and would like to know the following:

1. What's the easiest way to view denied packets that are being dropped due to firewall ACLs? Is there a command line and GUI version. I'm using an ASA with IOS 8.3

Thanks

 

[iggsterman]

You need to enable logging and watch either the log buffer or, having enabled remote (syslog) facility, the log server.
To enable logging, just an example:

[pre]logging enable
logging timestamp
logging buffer-size 500000
logging monitor critical
logging buffered errors
[/pre]
To add syslog to the above:

[pre]logging trap informational
logging host INTERFACE-NAME IP-ADDRESS-OF-THE-SYSLOGHOST[/pre]

 

[agentpineapple]

cool, thanks