Yes it does log to a syslog server. And I am currently doing that. They do not like the format.
This is from our Kiwi syslog 10.1.50.253 pixfirewall %PIX-5-304001: 68.123.166.135 Accessed URL 12.9.25.243:/diyguide.shtm Notice the Accessed URL it is an ip address not the host name. This is all good if the reverse dns entries are setup properly. But in the case of a server using host headers there is know way to tell wht the host name was/is. Kevin Bilbee > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Todd Holt > Sent: Tuesday, March 30, 2004 12:56 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] OT: Internet Usage Monitoring > > > Monster.com?? LOL -Just kidding. > > Can the PIX log to a syslog server? > > Todd Holt > Xidix Technologies, Inc > Las Vegas, NV USA > 702.319.4349 > www.xidix.com > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee > Sent: Tuesday, March 30, 2004 12:43 PM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] OT: Internet Usage Monitoring > > Management wants to do web usage mainitoring. They do not at this time > want > to do blocking. We have a pix firewall that does what Cisco calls URL > logging but in relaity it does not log the url but the ip address of the > server and the path on the server to the document being viewed. > > What they want is a log of client ip and url including the host name. > They > also do not want to abandon the PIX. > > > Any one have any suggestions? > > > > Kevin Bilbee > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus > (http://www.declude.com)] > > > --- > [This E-mail scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
