Re: Firewall Log Analysis

• Previous message: peter.schawackerat_private: "RE: Blocking ICMP with ipchains"
• Maybe in reply to: VN_Sabarinath@satyam-infoway.com: "Firewall Log Analysis"
• Next in thread: Chuck Swiger: "Re: Firewall Log Analysis"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I might just suggest you use ssh (scp actually) to move the logs around. It
is encrypted and a little more secure than plain ole ftp. You don't mention
what type of firewall you are running so it is difficult to discuss
particulars.

Bill


----- Original Message -----
From: <VN_Sabarinath@satyam-infoway.com>
To: <firewall-wizardsat_private>
Sent: Wednesday, January 12, 2000 9:05 PM
Subject: Firewall Log Analysis


>
>                                               Placed At :
>
>
> Hello,
>
> I administer 5 remote firewalls and wish to do seperate centralized
anaysis of
> the logfiles to generate custom reports.
>
> To get the log files, I propose to regularly FTP the files (in zipped
version,
> once a day, automatically)from the firewalls to a centralised machine.
This
> machine run a log anaysis software.  The report may be FTP'ed back or put
up on
> a website.
>
> 1) Are there any better approaches to do this?
>
> 2) We currently use Webtrends for firewalls and VPN's.  Is there an
unlimited
> license version for this product? (We are an ISP).
>
> 3) Can you suggest other log analysis software?
>
> Thanks/Regards
>
> VN Sabarinath
>
>
> Please Visit http://www.satyamonline.com for free e-mail
>

• Next message: Bayard G. Bell: "Re: Solaris Configuration List (the improv version)"
• Previous message: peter.schawackerat_private: "RE: Blocking ICMP with ipchains"
• Maybe in reply to: VN_Sabarinath@satyam-infoway.com: "Firewall Log Analysis"
• Next in thread: Chuck Swiger: "Re: Firewall Log Analysis"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 13:57:45 PDT