Re: Transfering off-system firewall audit trails

[Richard Rees <richard_rees () ins com>]

Checkpoint in particular supports a separate management console.  The
management console can store logs and rulesets.  This makes the firewall a
machine that is backed up just before "going live."  The (inside, and
better-protected) management console can be used to completely restore the
rulesets to a firewall that has been blown away and restored.

At 05:17 PM 6/10/99 -0500, Steven W. Engle wrote:
> Can these firewalls
> o      Borderware
> o      Guantlet
> o      Checkpoint Firewall-1
> o      Raptor
>
> transfer in "real-time" their audit trails to some other system (via
> 'syslogd' or something equivelent)?
>
> For those that have set-up this this type of functionality, what processes
> and/or automation are you performing on the receipient system to make use
> of the audit trails? What is/are the end result(s) of this processing /
> automation?
>
> Thanks!
>
> Steve Engle
> --
> sengle () dhtinc com
----------------------------------------------------------------------------
-------------------------
Richard Rees                            email:  richard_rees () ins com
International Network Services          pager:  (800) 467-1467 or
Network Systems Consultant              page_richard_rees () ins com
Network Security Services               fax:  (847) 995-7701
1100 E. Woodfield Road, Suite 437
Schaumburg, IL 60196
Do not interfere in the affairs of dragons, for you are crunchy and taste
good with ketchup.
"The choices we make dictate the life we lead.  To thine own self be true"