logging remote

To configure remote logging encryption options, use the logging remote command in configuration mode.

Syntax

[no] logging remote ssl cert-verify

logging remote ssl cipher-list {original | fips | cc-ndcpp | fips-and-cc-ndcpp | fips-high-security | cc-ndcpp-high-security | fips-and-cc-ndcpp-high-security | compatible}

no logging remote ssl cipher-list

logging remote ssl min-version {tls1 | tls1.1 | tls1.2}

no logging remote ssl min-version

Parameters

ssl cert-verify	Enables remote syslog SSL/TLS certificate verification.
ssl cipher-list {original \| fips \| cc-ndcpp \| fips-and-cc-ndcpp \| fips-high-security \| cc-ndcpp-high-security \| fips-and-cc-ndcpp-high-security \| compatible}	Configures the remote syslog cipher list for SSL/TLS: original—Original FireEye cipher list (maximum compatibility) fips—Compliant with FIPS cc-ndcpp—Compliant with CC-NDPP fips-and-cc-ndcpp—Compliant with both FIPS and CC-NDPP fips-high-security—Compliant with FIPS and excludes low-security ciphers cc-ndcpp-high-security—Compliant with CC-NDPP and excludes low-security ciphers fips-and-cc-ndcpp-high-security—Compliant with both FIPS and CC-NDPP and excludes low-security ciphers compatible—Improved security while maintaining backward compatibility
no logging remote ssl cipher-list	Resets the remote syslog cipher list to its default (compatible).
ssl min-version{tls1 \| tls1.1 \| tls1.2}	Configures the minimum SSL version for remote syslog: tls1—Requires TLSv1 or higher. tls1.1—Requires TLSv1.1 or higher. tls1.2—Requires TLSv1.2 or higher.
no logging remote ssl min-version	Resets the remote syslog SSL minimum protocol version to the factory default (TLS v1.2).

Example

The following example sets the minimum SSL version for remote syslog to TLSv1.

logging remote ssl min-version tls1

User role

Admin