I am installing Telemate.Net and trying to configure it to use our PIX
firewall's log files. For this version of PIX, only two options exist within
Telemate: PIX Firewall Manager  and PIX Log Files.   

PIX Firewall Manager so far has proven to hog the CPU of the Telemate server
to the point where the server will hang (NT 4.0, SQL 7.0, all SPs).  Since
PFM requires an NT server and I don't have one to devote only to PFM, I
decided to try the log file route.  While PFM was still running on the
Telemate server, I directed the output to a log file. Here is a sample of
the output:

Nov 23 1999 17:19:56  PIXIP[1xx.x.5.155] Group ID[107001] Facility[20]
Priority[2]  <162>%PIX-2-107001: 204.71.200.34 attempted to ping
xxx.xx.23.178 (xxx.x.6.62)

When I read that the firewall could redirect its output to a Unix host using
syslogd, I uninstalled PFM and redirected the firewall's output to our AIX
machine. Here's a sample of that output:

Dec  2 13:45:16 xxx.x.5.155 %PIX-2-107001: 204.71.200.33 attempted to ping
xxx.xx.23.178 (xxx.x.6.62)

This solution uses only disk space, and no cpu overhead, and would be the
*perfect* solution except for one thing... the Telemate software doesn't
interpret the text file from the AIX machine (but works fine with the first
example output). 

Does anyone know if it is possible to get the output to look like the first
example? I attempted to write a script to do the conversion but the <nnn>
string doesn't appear in the AIX machine's text. If there's a firewall
command to change the output format, I've missed it somewhere.  The same
commands were used on the firewall side - only the IP address was changed to
the Unix machine.

I greatly appreciate any and all help.

Debbie Nosse
Fairmont General Hospital

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to