Hi Rob,
I would recommend to use the PIX Firewall Manager. I dont like this tool very much,
but it is ok for the logging business. The advantage is that you can filter the
log-messages
in a way, that allows you to receive email on certain events or to NOT log other
events.
It often occurs that harmless messages fill up your logfile, so you cant see the
important ones.
First you must configure Pix to know where it should send the loggings to:
logging host inside 192.168.x.x
PIX has six logging levels, where lower levels are errors or "attacks" and the upper
levels are
for debugging purposes. If you want to see what your users are doing in the internet
then turn
it to debugging, you can use the PIX Firewall Manager to receive a TOP Web Sites list
etc.
If you simply want to log the events I would use level 3 "warnings".
logging trap warnings (or debugging)
That was it. You need NT (Wkst./Server) with SP4 (and only 4, not 5, not 6) with the
IE 4.
If you dont want to filter the logfiles in a way I described above, you should use the
KIWI-Syslog
Daemon for Windows systems. It is Freeware and much better than the Cisco Syslog
Server.
Go to: http://www.kiwi-enterprises.com
I would still recommend to use the PFM, as you will most likely get a lots of log
messages even if
you turn the Level to "warnings". You will be glad to filter out those messages that
you know are
harmless.
Bye Sascha
--------------------------------------------------------------------------------
Sascha Weigelmann Email: [EMAIL PROTECTED]
Tel.: +49 6172-288-383
Mobil 0170-5778857
Fax: +49 6172-288-402
ADS System AG http://www.ads.de
Siemensstr. 25a
D-61352 Bad Homburg
The Network Service Company
--------------------------------------------------------------------------------
>>> "Rob Serfozo" <[EMAIL PROTECTED]> 13.06.2000 17.35 Uhr >>>
Thanks to all who helped with my recent PIX DMZ questions. I am now coming
back to the helpful people on the Firewall list with another question. I am
hoping to receive my PIX logs onto a Windows NT workstation. Is there any
way to configure the PIX to perform this, either into a .txt file or any
other way.
Thanks again for your help,
Rob Serfozo
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
