Check the file cpmgmt.aud in $FWDIR/log. I don’t know if it is there on those NT things, but under Solaris, it work beautifully. It won’t show you log in data, but it will tell you policy changes.

 

Cheers,

Craig

 

-----Original Message-----
From: "Sch�nfelder, Sven" [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 29, 2001 12:38 AM
To: Tucker, Tom; [EMAIL PROTECTED]
Subject: AW: [FW1] Firewall Managmenet Logging - Administrator Activity

 

Hello Tom,

 

this feature is added to Check Point NG.

 

Bye,

Sven

-----Urspr�ngliche Nachricht-----
Von: Tucker, Tom [mailto:[EMAIL PROTECTED]]
Gesendet: Montag, 27. August 2001 21:15
An: [EMAIL PROTECTED]
Betreff: [FW1] Firewall Managmenet Logging - Administrator Activity

 

Does CheckPoint log when a user/administrator connects via the Policy Editor?  How can I monitor when a firewall change occurs and by whom?

 

Thanks,

 

Tom

 

Reply via email to