Re: Juniper NSM and secure log forwarding
Jon <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.wizards |
|---|---|
| Message-ID | <[email protected]> |
>From a Juniper Systems Engineer: First, all logs sent to NSM either via SSP or DMI are encrypted. Second, we don't use postgreSQL to store firewall logs, only profiler data. We have a proprietary logDb that uses a flat-file, compressed format for the logs. The logs are not stored in an encrypted format, but the files are owned by the "nsm" account, so you would need the credentials for "nsm" or "root" to access them. Logs forwarded by NSM via the "Action Manager" will be sent in clear-text though as we use standard syslog or SNMP-Trap formats for this function. Regards, Jon (Disclosure - I work for Juniper) On Tue, Jan 19, 2010 at 11:33 AM, Trey Darley <[email protected]>wrote: > Hi, y'all - > > Looking for suggestions as to how you've integrated NSM into your logging > environment. While it appears not to support ssl-wrapping syslog, it does > store it's logs internally in postgresql. Before I go hammering up a > cockeyed solution I thought I'd ask the hive. > > Cheers, > --Trey > > > > _______________________________________________ > firewall-wizards mailing list > [email protected] > https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards > _______________________________________________ firewall-wizards mailing list [email protected] https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards