Cisco Cisco Web Security Appliance S170 사용자 가이드

다운로드
페이지 582
430
I R O N P O R T   A S Y N C O S   6 . 3   F O R   W E B   U S E R   G U I D E  
• Automatically. AsyncOS rolls over log subscriptions based on the first user-specified limit 
reached: maximum file size or maximum time. Log subscriptions based on the FTP poll 
retrieval method create files and store them in the FTP directory on the appliance until 
they are retrieved from a remote FTP client, or until the system needs to create more space 
for log files.
To roll over a log subscription in the web interface:
1. Navigate to the System Administration > Log Subscriptions page.
2. Click the check box under the Rollover column for each log subscription you want to roll 
over.
3. Click Rollover Now.
Working with Compressed Log Files
To save disk space on the Web Security appliance, log subscriptions can compress rolled over 
log files before storing them on the disk. Only rolled over logs are compressed. The current 
active log file is not compressed.
Each log subscription has its own log compression setting, so you can choose which log 
subscriptions to compress. AsyncOS compresses log files using the gzip compression format.
Viewing the Most Recent Log Files
You can view a the most recent version of a log file from the following locations:
• Web interface. On the System Administration > Log Subscriptions page, click the name of 
the log subscription in the Log Files column of the list of log subscriptions. When you 
click the link to the log subscription, AsyncOS prompts you to enter your password. Then 
it lists the available log files for that subscription. Click one of the log files to view it in 
your browser or to save it to disk.
• Command line interface. Use the 
tail
 CLI command. AsyncOS displays the configured 
log subscriptions and prompts you to select the log subscription to view. Use Ctrl+C to 
exit from the 
tail
 command at any time.
Note — If a log subscription is compressed, you must download it before you can 
uncompress and open it.
Configuring Host Keys
Use the 
logconfig -> hostkeyconfig
 subcommand to manage host keys for use with 
SSH when pushing log files to other servers from the Web Security appliance. SSH servers 
must have a pair of host keys, one private and one public. The private host key resides on the 
SSH server and cannot be read by remote machines. The public host key is distributed to any 
client machine that needs to interact with the SSH server.