Take a look at X-Stop, it is firewall independent. I tried WebSense and
found that it did not have all the features I wanted, so I am trailing
X-Stop now and it looks pretty good. It is an appliance and you can either
have it listen promiscuously on the Ethernet segment attached to the inside
of your firewall where it will intercept connections (sending a spoofed
packet to the client and a reset on the outbound connection attempt. This
prevents it from being a single point of failure if the server goes down,
but the traffic will get through. You can also pass all traffic through
the box if you prefer that configuration.
They have built in log reporting and you can look at the actual log file as
well.
-Kathleen
_______________________
Kathleen M. Moriarty
"Jim Lemieux"
<colflagg_2k@ To: "SAGI MINI" <[EMAIL PROTECTED]>,
yahoo.com> [EMAIL PROTECTED]
cc: (bcc: Kathleen Moriarty/FactSet)
03/22/00
02:10 PM Subject: Re: RE:Webtrends analyzer
We use the Webtrends for Firewalls v2.1c product. It works with most of
the
major
Firewall vendors. It is o.k. but is a performance hog. If you use it make
sure
you have gobs of memory available (> 256MB). It does a large amount of
sorting and
summarizing. I only wish it would work with a real database server. The
only thing
it can't get you is detailed information on user activity. It can get you
the amount of
user activity, and the top 10 sites, but can't get any more detailed than
that. It can also
provide things such as bandwidth utilization by protocol, outgoing usage by
protocol, incoming
protocol attempts, critical rejected events, drop summaries, top email
senders/destinations, etc.
Jim Lemieux
----- Original Message -----
From: "SAGI MINI" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, March 22, 2000 10:37 AM
Subject: RE:Webtrends analyzer
> Does anyone using Webtrends products before ?? Can i obtain the same kind
of
> analysis reports(security,network performance, web activities) from
> firewalls - checkpoint / watchguard. How can the Webtrends really helps
you
> ??
> ______________________________________________________
> Get Your Private, Free Email at http://www.hotmail.com
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
