Walter,
I'm assuming what you mean by 'traffic' is stuff like SMTP, POP3, HTTP, FTP,
etc. If this is what you're looking to log, you'll probably do better to log it
at the generating/receiving application. If on the other hand, you're only
worried about security related traffic, you won't want to use NT EventLog. To
set the EventLog to the level to match the detail of a firewall log will cause
NT to also log a large amount of information that is unrelated to security (not
to mention creating log files the size of Texas.)
Regards,
Howard
-----Original Message-----
From: "Walter Lecossois" <[EMAIL PROTECTED]> at INTERNET1
Sent: Wednesday, March 24, 1999 1:49 PM
To: [EMAIL PROTECTED] at Internet1
Subject: logging on NT
Hello,
I would like to log the traffic that is going over a NT machine. We
considered installing a cheap firewall on that machine that will
generate the necessary loggings. But that is a bit overkill, because
we won't define any rules on that machine. We are only interested in
the loggings. It would be nice if we could save to loggings to
textfiles for archiving purposes.
So I have to following questions :
- do we really need to install a firewall, or can we do the job with
NT. I have no idea how you can generate a firewall-kind of loggings.
- what cheap solution could we use to generate the loggings ?
Regards,
Walter.
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
