Re: Cisco PIX Logs - Rule Change

"Paul Melson" <[email protected]>
Newsgroups gmane.comp.sysutils.loganalysis
Message-ID <[email protected]>
On 8/3/07, saudi sans <[email protected]> wrote:
> Does Cisco PIX 6.3 generate a log when a rule[ACL] is changed.

Yes.  The PIX records any time the configuration is changed.  If you
are doing AAA for enable access it will record the username as well.

> If yes does it contain which ACL was changed etc.

Nope, sorry.


> We want to track all changes in rules via monitoring PIX logs?

You'll need a 3rd-party tool.  Kiwi CatTools might be worth looking at.

PaulM
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.