liveBook · Manning

Syslog over TLS

As explained in Acing the CCNA Exam: Volume 2 Advanced Networking and Security

Syslog over TLS is a transport profile that carries Syslog messages over a Transport Layer Security-protected TCP connection.

Syslog over TLS carries device log messages across a TLS-protected TCP connection. It provides a more secure alternative to standard Syslog, which uses UDP. section 7.3 section 7.1.3

Remember these operational and exam-relevant facts:

  • Standard Syslog uses UDP port 514. section 7.1.3
  • Syslog over TLS uses TCP port 6514, not UDP. section 7.3 section 7.1.3
  • Cisco devices send logs to a configured server with logging host ip-address; the host keyword is optional. section 7.1.3
  • Detailed TLS configuration is outside the stated exam scope; identify the protocol and its TCP port. section 7.1.3

Configuring a Syslog destination

SW1(config)# logging host 192.0.2.10 The device is directed to send Syslog messages to the specified server. Standard server delivery uses UDP 514; a TLS-protected deployment uses TCP 6514. section 7.1.3 section 7.3

How Acing the CCNA Exam: Volume 2 Advanced Networking and Security covers it

How deep it goes
Distinguishes UDP 514 from TCP 6514 and stops short of explaining TLS configuration details.
Examples
Uses the logging host ip-address command and contrasts standard UDP 514 delivery with TLS-protected TCP 6514 delivery.
What it assumes
Assumes familiarity with Syslog servers and introduces the transport distinction between standard and TLS-protected Syslog.
What you can do after
Evaluate Syslog transport choices and identify TCP 6514 as the secure alternative to UDP 514.
How it connects
Connects Syslog over TLS with Syslog servers, UDP, TCP, Transport Layer Security, and centralized logging.
Cover of Acing the CCNA Exam: Volume 2 Advanced Networking and Security
liveBookmanning.com
Read Acing the CCNA Exam: Volume 2 Advanced Networking and Security on liveBook Get the book at manning.com

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Acing the CCNA Exam: Volume 2 Advanced Networking and Security. The section links point to the parts of the book it draws on.