Enables or disables a session log field for each connection event logged by the Network Security appliance when it detects SSL interception traffic. You enable the session log separately.
For details about how to enable or disable the session log fields, see the "Managing the Connection Event Logs of the SSL Flows" section in the "Troubleshooting" appendix of the Network Security User Guide.
Syntax
[no] session-logger ssl field <log_fieldName> enable
Parameters
no
Use the no form of this command to disable the session log fields for each connection event.
<log_fieldName>
The log field you want to log to the appliance. Valid session log fields are:
cs_cipher_suite—Cipher suite associated with client-side connections.rs_cipher_suite—Cipher suite associated with server-side connections.rs_cert_status—Server-side certificate that is logged.cs_bytes—Client-side bytes transferred during the connection and logged.rs_bytes—Server-side bytes transferred during the connection and logged.time_taken—Date and time that the connection event is logged.
Example
The following example shows how to enable three session log fields for SSL interception traffic:
hostname (config) # session-logger ssl field cs_bytes enable
hostname (config) # session-logger ssl field cs_cipher_suite enable
hostname (config) # session-logger ssl field rs_cipher_suite enable
hostname (config) # show session-logger ssl config Feature Status : enabled Max File Rotation Limit : 5 Field Name : Status ------------------------ cs_bytes : ONcs_cipher_suite : ON rs_bytes : OFF rs_cert_status : OFF rs_cipher_suite : ON time_taken : OFF
The following example shows how to disable one session log field for SSL interception traffic:
hostname (config) # no session-logger ssl field cs_cipher_suite enable
hostname (config) # show session-logger ssl config Feature Status : enabled Max File Rotation Limit : 5 Field Name : Status ------------------------ cs_bytes : ON cs_cipher_suite : OFF rs_bytes : OFF rs_cert_status : OFF rs_cipher_suite : ON time_taken : OFF
User role
Admin
Command mode
Config
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Network Security: Release 8.2.1.