Cisco ASA/FTD via AMA
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
| Attribute | Value |
|---|---|
| Connector ID | CiscoAsaAma |
| Publisher | Microsoft |
| Used in Solutions | CiscoASA |
| Collection Method | AMA |
| Connector Definition Files | template_CiscoAsaAma.JSON |
The Cisco ASA firewall connector allows you to easily connect your Cisco ASA logs with Microsoft Sentinel, to view dashboards, create custom alerts, and improve investigation. This gives you more insight into your organization's network and improves your security operation capabilities.
Additional Information
- 📖 Vendor Documentation: Cisco ASA Syslog Messages - Complete ASA syslog message reference
- 📖 Setup Guide: Cisco firewalls connector - Connect Cisco ASA and Firepower firewalls to Microsoft Sentinel
Tables Ingested
This connector ingests data into the following tables:
| Table | Selection Criteria | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|---|
CommonSecurityLog |
DeviceProduct in "ASA,FTD"DeviceVendor == "Cisco" |
✓ | ✓ | ? |
Heartbeat |
? | ✗ | ? |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions: - Workspace data sources (Workspace): read and write permissions.
Custom Permissions:
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Enable data collection rule
Cisco ASA/FTD event logs are collected only from Linux agents. - Configure CiscoAsaAma data connector
- Create data collection rule
2. Run the following command to install and apply the Cisco ASA/FTD collector:
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊