Re: Sonic Wall logs and privacy issues
From: Blake McNeill (info@SonicLogger.com)
Date: 01/31/03
- Next message: Matty M: "Re: Massive probes on port 4662 - could need som advice."
- Previous message: Duane Arnold: "Re: BlackICE & SQL Slammer"
- In reply to: Abby: "Sonic Wall logs and privacy issues"
- Next in thread: Mike: "Re: Sonic Wall logs and privacy issues"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Blake McNeill" <info@SonicLogger.com> Date: Thu, 30 Jan 2003 23:36:40 GMT
Your SonicWall TZ could be logged remotely and your company should be able
to tell you that, and what policies they have concerning monitoring of
employees (including restrictions, exceptions, etc).
- SonicWall uses Syslog to send its logs out. Typically logs are sent out
over UDP port 514, but the port number can be changed. The SonicWall can
also be configured as to what IP Address(es) it sends its logs to.
- ZoneAlarm will not stop the logs from being sent out, as the logs are sent
directly from the SonicWall and ZoneAlarm only affects traffic on your local
computer and has no effect on anything else on your network.
- You could wire your home network not to go through the SonicWall, but that
means your home network wouldn't benefit from the security provided by your
SonicWall, and you might need another internet connection, etc for your home
network.
- There is always a way to monitor something, but I would check with your
company and see if you really have any reason to worry about this. The
SonicWall has very complete logging data as do most higher end firewalls so
if your company is logging it, then they would have a full set of
information available to them (inbound/outbound connection information,
bandwidth, etc). What they do with this information should be outlined in
their policies and standards.
You might want to see if the system admin would configure your SonicWall to
send a copy of its logging stream to your system so you can see what data is
being logged. We could give you a free trial copy of our soon to be
released SonicLogger product for a couple of weeks so you could see what is
logged and how it can be used. SonicLogger is a advanced professional
logging tool for SonicWall firewalls which could likely tell you more about
your traffic then whatever your administrator is currently using.
Blake McNeill
http://www.SonicLogger.com
"Abby" <abbyzenal@hotpop.com> wrote in message
news:39c25121.0301301308.d01a953@posting.google.com...
> Im a little confused and pehaps a bit paranoid on how the Sonicwall
> firmware works when sending logs. I am a remote home office - a larger
> firm has supplied me with a tele3 tz which I use to connect to a vpn.
>
> I am suspecting that detailed logs are sent or acessed and that Im
> being watched. When I try to login to the IP of the tele3 tz to check
> settings and use "admin and "password" I'm unsucessful although I can
> see web login screen. Heres what I want to know in order to protect my
> privacy....
>
> How does the sonicwall send the log? - does it require that my machine
> be on or can it access the box directly at any time?
>
> Could a program like Zone alarm block the log in any way?
>
> Could I wire the box in a way to keep my home usage out of logs?
>
> Is there a way that track the activity of sonic wall without admin
> privilages to see what its up to?
>
> Thanks
>
> Abby
- Next message: Matty M: "Re: Massive probes on port 4662 - could need som advice."
- Previous message: Duane Arnold: "Re: BlackICE & SQL Slammer"
- In reply to: Abby: "Sonic Wall logs and privacy issues"
- Next in thread: Mike: "Re: Sonic Wall logs and privacy issues"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
