Greetings!

On Sun, 16 Nov 2003 22:06:38 -0600 Wes Noonan
<[EMAIL PROTECTED]> wrote:
> Can SecurePlatform/FireWall-1 be configured to log to a syslog server,
> and if does anyone have any documentation on the subject?

Sure - it's just the standard SYSLOGD running there, so for redirection
see
        man syslogd
and     man syslogd.conf

Unfortunately that will only affect the system (Linux) logs, not the
FW1 packet filter logs.


> Is it possible to send SecurePlatform/FireWall-1 events to a
> syslog server instead of their proprietary logging format?

There is an "industry standard" OPSEC plugin that e.g. WebTrends
firewall analysis product uses - unfortunately I do not know of any open
software that uses that one. After getting hold of the log API
converting to syslog should be/have been easy. Maybe you want to have a
try?

Bye

Volker Tanger
ITK-Security

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to