Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 1211
 
38-47
AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide
 
Chapter 38      Logging
  Log Subscriptions
Configuring Host Keys
Use the 
logconfig -> hostkeyconfig
 subcommand to manage host keys for use with SSH when 
pushing logs to other servers from the Email Security appliance. SSH servers must have a pair of host 
keys, one private and one public. The private host key resides on the SSH server and cannot be read by 
remote machines. The public host key is distributed to any client machine that needs to interact with the 
SSH server.
Note
To manage user keys, see 
The 
hostkeyconfig
 subcommand performs the following functions:
In the following example, AsyncOS scans for host keys and add them for the host:
Mon Feb 21 12:25:10 2011 Info: PID 274: User system commit changes: Automated Update for 
Quarantine Delivery Host
Mon Feb 21 23:18:10 2011 Info: PID 19626: User admin commit changes:
Mon Feb 21 23:18:10 2011 Info: PID 274: User system commit changes: Updated filter logs 
config
Mon Feb 21 23:46:06 2011 Info: PID 25696: User admin commit changes: Receiving 
suspended.
^C
mail3.example.com>
Table 38-36
Managing Host Keys - List of Subcommands
Command
Description
New
Add a new key.
Edit
Modify an existing key.
Delete
Delete an existing key.
Scan
Automatically download a host key.
Print
Display a key.
Host
Display system host keys. This is the value to place in the remote system's 
‘known_hosts’ file.
Fingerprint
Display system host key fingerprints.
User
Display the public key of the system account that pushes the logs to the remote 
machine. This is the same key that is displayed when setting up an SCP push 
subscription. This is the value to place in the remote system's 'authorized_keys' 
file. 
mail3.example.com> logconfig
Currently configured logs: