Hmmmm
.....
I
suppose that there are certain benefits to having a seperate syslog server. I
have read a lot of whitepapers about securing your logs and one of the main
points was to have a seperate secured syslog server, so that kinda takes care of
that by default.
Many
thanks for all the replies.
Cheers
Mark
-----Urspr�ngliche Nachricht-----
Von: Horst Moll [mailto:[EMAIL PROTECTED]]
Gesendet: 29 May 2001 12:43
An: Johnston Mark; [EMAIL PROTECTED]
Betreff: AW: Cisco and FW -1If you use a dedicated syslog server you can use the capabilities of that OS (maybe with additional freeware tools) to establish your own alerting and logging scenario.FW-1 on Unix would offer you a broad range of capabilities, which you can use on the firewall directly. If you want to go with the PIX, I would suggest a dedicated syslog server.We use a FW1 on Solaris and we combined the capabilities of both, FW1 and Solaris.:-)Horst-----Urspr�ngliche Nachricht-----
Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]Im Auftrag von Johnston Mark
Gesendet: Dienstag, 29. Mai 2001 10:41
An: [EMAIL PROTECTED]
Betreff: Cisco and FW -1Hi all,
Need some help from persons who have knowledge about FW-1 and Cisco Pix.
We are looking to replace our FW as its currently limited to 3 interfaces and we now have a requirement for 4. But before purchasing the unit there is just a little bit of information that I need to know, more on the alerting and logging capabilities of the 2 suggested firewalls.
From most of the whitepapers I have read (the honeypot project etc) I noticed that most use FW-1. I know that it can handle logging and custom alerts quite well, but can Cisco. I have had mixed vendor reports and sometimes I think that those guys will say anything to get a sale .... so let me rather ask persons who have 1st hand experience.
Thanks
Mark
