Re: [fw-wiz] Syslog set up
From: Brian A Kee (bkee_at_lurhq.com)
Date: 07/24/03
- Previous message: Jim McAtee: "Re: [fw-wiz] Watchguard V60 capacity"
- In reply to: Doug Garrison: "[fw-wiz] Syslog set up"
- Next in thread: Brian Ford: "Re: [fw-wiz] Syslog set up"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: "Doug Garrison" <doug.garrison@tagtmi.com>, <firewall-wizards@honor.icsalabs.com> Date: Thu, 24 Jul 2003 13:40:28 -0500
Something to look at:
In PIX v6.3, Cisco added the ability to filter out specific log messages
from the syslog output. I have not yet had the time to work with it, but it
seems to be promising.
http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_data_sheet09186a0080148714.html
...
Syslog by access control list (ACL) entry
Introduces powerful new reporting and troubleshooting capabilities that
enable detailed statistics to be gathered on which ACL entries are triggered
by network traffic attempting to traverse a Cisco PIX Security Appliance
Gives precise control over which ACL entry-related syslog events are
generated
Assignable syslog levels by message
Provides administrators tremendous flexibility and control over which syslog
messages Cisco PIX Security Appliances generate
BAK
----- Original Message -----
From: "Doug Garrison" <doug.garrison@tagtmi.com>
To: <firewall-wizards@honor.icsalabs.com>
Sent: Thursday, July 17, 2003 4:32 PM
Subject: [fw-wiz] Syslog set up
> I am looking for a document or suggestions on setting up what events to
log
> on a Cisco PIX. I am not concerned about following our security policy
yet
> I just need a 'Best Practice" type of document to get started from.
>
>
> Thanks for your input.
>
>
>
>
> Doug Garrison
>
>
>
>
>
_______________________________________________
firewall-wizards mailing list
firewall-wizards@honor.icsalabs.com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
- Previous message: Jim McAtee: "Re: [fw-wiz] Watchguard V60 capacity"
- In reply to: Doug Garrison: "[fw-wiz] Syslog set up"
- Next in thread: Brian Ford: "Re: [fw-wiz] Syslog set up"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
