On 10/04/2010 06:02 PM, karem abd elfatah wrote:
can i install the OSSEC agent into ASA firewall to monitor any change in the firewall configuration or any change in the IOS
OSSEC supports ASA through syslog and monitoring the running config through agentless. This gives you pretty complete oversight but I would do some testing to make sure the rules you need are there. Also, you'll want to make sure the ASA doesn't add an extra syslog header and that you have the appropriate log level defined.
-- Michael Starks [I] Immutable Security http://www.immutablesecurity.com
