Cisco Pix: Logging and Beyond

After the implementation of your firewall and security policy, setting up the logging/monitoring of the traffic is the most important step. The logging/monitoring that is done now will help catch and analyze current traffic plus give the ability to trend and analyze any previous history. This document will present a "how to" on logging of a Cisco Pix Firewall version 6.1. It will show how to implement logging via a SYSLOG locally and remotely (VPN Solution). It will also discuss some of the logging that can be done with the Cisco Pix Device Manager (PDM) which is a graphical utility that is supported by Cisco Pix Firewall version 6.0 and above.

Tags:

Read the complete paper at SANS