Configure Network Device - Cisco Firepower

This article will describe the steps required to configure Cisco Firepower to send Syslog messages to the RocketAgent Syslog Server

1. From the Main Firepower Device Manager screen, select the Logging Settings under the System Settings in the lower right-hand corner of the screen.
   
2. On the System Settings screen, Select the Logging Settings in the left-hand menu.
   
3. Set the Data Logging toggle switch, select the + sign under Syslog Servers.
4. Select Add Syslog Server. Alternatively, you can create the Syslog Server object in Objects - Syslog Servers.
   
5. Enter the IP Address of your Syslog Server and port number. Select the radio button for Data Interface and select OK.
   
6. Next, select the new Syslog server and select OK.
   
7. Select the Severity level to filter with the all events radio button and select your desired logging level.
   
8. Select Save at the bottom of the screen.
   
9. Verify the settings were successful.
   
10. Deploy the new settings.
    
11. And
    

Additional information on troubleshooting and access control can be found in the Cisco article: https://www.cisco.com/c/en/us/support/docs/security/firepower-2130-security-appliance/220231-configure-and-verify-syslog-in-firepower.html#toc-hId-1961531250