[logs] Re: PIX configuration change logging

From: Cerrato, Peter (Peter.Cerrato@private)
Date: Mon Oct 02 2006 - 09:12:44 PDT


Hello Paul and Log Analysis list,

We found this :

%PIX-5-111008: User 'user' executed the 'cmd' command.

Explanation   This message indicates that a command change to the
configuration has been made from an AAA authenticated session.


here :
http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_system_me
ssage_guide_chapter09186a00800891c4.html


Still looking into how we implement this.

-Peter

-----Original Message-----
From: Paul Melson [mailto:pmelson@private] 
Sent: Monday, October 02, 2006 7:27 AM
To: Cerrato, Peter; loganalysis@private
Subject: RE: [logs] PIX configuration change logging


-----Original Message-----
Subject: [logs] PIX configuration change logging

> Simple question : is there any way to get a PIX to log the exact
configuration changes as they are made?

Simple answer: Nope.

PaulM


_______________________________________________
LogAnalysis mailing list
LogAnalysis@private
http://lists.shmoo.com/mailman/listinfo/loganalysis



This archive was generated by hypermail 2.1.3 : Mon Oct 02 2006 - 19:27:48 PDT