Jorge cruces wrote: > Hello, > > I have 3 checkpoint firewalls in windows. Is there any way to send the > logs to ossec?
Hello Juan, Most likely. Do they log to the application log? If so, they're already being sent to OSSEC. Is it an ASCII file? If that's the case, you can tell OSSEC to monitor it and define the log type as syslog in ossec.conf. -- Michael Starks [I] Immutable Security http://www.immutablesecurity.com
