Hi all!
I�m currently training myself in the Firewalls-Topic, and was wondering how
you keep track of all the different logfiles... every vendor seems to make
up their own format. Does anybody know a tool that can read different
logfiles (like Checkpoint / Raptor / Cisco etc. ) and do a bit of analyzing
to show trends, peaks etc.? It would seem useful for me for example to show
a statistic based on Ports or adresses, to look for attack patterns. Plus,
it would give IT-Management some presentations to show at meetings to
justify the need for firewalls :-) (I know this shouldn�t be necessary in
an ideal company, but who works in an ideal company where the beancounters
don�t rule)
Mit freundlichen Gruessen - Yours sincerely
Juergen Nieveler
CompuNet Koeln
System Engineering
nternet: Juergen.Nieveler @ gecits-eu.com
Disclaimer: Views are mine, not my employers�
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
