It sounds like you are looking for an IDS, not a reporting tool. If you are
just looking for reporting on the Firewall's usage,
Webtrends works fine, but will not give you any useful alarm reporting. I am
not going to recommend an IDS since I am not versed enough in that area, yet ...
Jim Lemieux
[EMAIL PROTECTED] on 09/07/99 02:54:47 PM
To: [EMAIL PROTECTED]
cc: (bcc: Security/CT/ERNotes)
Subject: Firewall-1 Reporting Tool
Hi.
Does anyone have any opinions on any of the Firewall-1 reporting and log
analysis tools out there? I'm currently looking at WebTrends, Netcool, and
SecureView. I need something that is going to make it easy to detect
intrusion attempts, that may provide alarms in real time, and can compile
logs from several firewalls. I would prefer that the tool be expandable to
include syslog and eventlog entries as well.
Carrie
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]