OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: RE: [fw-wiz] Reading firewall logs
From: Andrew Helm-Cowley (acowleyicsbermuda.com)
Date: Thu Apr 27 2000 - 07:11:57 CDT

If you are using FW-1 4.1 then get there reporting module if you are using v
4.0 then get SecureIT's SecureView product. Both of there will report on
usage, dropped packets, etc

Andrew Helm-Cowley
Senior Security Consultant
Independent Consulting Solutions Ltd
Tel:(441) 295 3806

 -----Original Message-----
From: owner-firewall-wizardslists.nfr.net
[mailto:owner-firewall-wizardslists.nfr.net] On Behalf Of Alex Lim
Sent: Wednesday, April 26, 2000 12:22 AM
To: fwz
Subject: [fw-wiz] Reading firewall logs

Hi,

I am hoping to hear some enlightening comments on reading firewall logs.
I am curious if people are actually doing it or is there some kind of
tools that we can buy off the shelf. I dun think it's productive or
efficient to ask an employee to spend a few hours reading the logs just
to look out for anomalies.

Anyone care to comment ? BTW I am referring to the Checkpoint FW-1 logs.

TIA
Alex Lim