Cisco Cisco Web Security Appliance S670 Technical Manual

Contributed by Handy Putra, Cisco TAC Engineer.
Aug 26, 2014

Introduction
Prerequisites
     Requirements
     Components Used
Configure
Verify
Troubleshoot

This document describes how to transfer logs from the Cisco Web Security Appliance (WSA) to a remote
Secure Copy (SCP) server. You can configure the WSA logs, such as access and authentication logs, so that
they are forwarded to an external server with SCP protocol when the logs roll−over or wrap.

The information in this document describes how to configure the log rotation rules as well as the Secure Shell
(SSH) keys that are required for a successful transfer to an SCP server.

There are no specific requirements for this document.

This document is not restricted to specific software and hardware versions.

The information in this document was created from the devices in a specific lab environment. All of the
devices used in this document started with a cleared (default) configuration. If your network is live, make sure
that you understand the potential impact of any command.

Complete these steps in order to configure the WSA logs so that they can be retreived with SCP on a remote
server:

Log into the WSA web GUI.

1. 

Navigate to System Administration > Log Subscriptions.

2. 

Select the name of the log(s) for which you desire to configure this retrieval method, such as access
logs.

3.