I use this feature also, and it works great for URL logging. Just to clarify, there is no way to log URLs on ports other than 80, correct?
-----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Matthew Odendaal Sent: Friday, September 14, 2007 11:20 AM To: [email protected] Subject: Re: [FW-1] Can Checkpoint do this? Creating a URI resource with the option "Optimize URL logging" will definitely work. Just create a URI object and include that in your rule instead of the normal http service object. I use this for my own firewall to track URLs. Cheers Matthew Odendaal MCSE, RSACSP, CCSA, CCSE, CCSE+, CCSI. NSA, NSI Information Security Architects (Pty) Ltd Tel: +27 11 326 2242 Fax: +27 11 326 2285 Mobile: +27 83 260 3339 [EMAIL PROTECTED] -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of cisco4ng Sent: 14 September 2007 04:56 PM To: [email protected] Subject: [FW-1] Can Checkpoint do this? I have a question for gurus in this forum: With Cisco Pix/ASA firewalls, with the right setting like this: logging on logging timestamp logging facility 19 logging host inside 192.168.1.1 logging trap 6 With these settings, hosts from the internal network, when surfing the internet, will be logged down to the *.gif images on the Internet that they visit. For example, let say someone is surfing playboy.com and looking at miss_september.gif image(s), the pix firewall will send that back to the syslog server. Basically the logging is very granular and details. I am wondering if Checkpoint can do something similar to that. My guess would be no but I would like a confirmation on this. Thanks. --------------------------------- Boardwalk for $500? In 2007? Ha! Play Monopoly Here and Now (it's updated for today's economy) at Yahoo! Games. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
