RE: Reading firewall logs

["Andrew Helm-Cowley" <acowley () icsbermuda com>]

If you are using FW-1 4.1 then get there reporting module if you are using v
4.0 then get SecureIT's SecureView product.  Both of there will report on
usage, dropped packets, etc

Andrew Helm-Cowley
Senior Security Consultant
Independent Consulting Solutions Ltd
Tel:(441) 295 3806

 -----Original Message-----
From:   owner-firewall-wizards () lists nfr net
[mailto:owner-firewall-wizards () lists nfr net]  On Behalf Of Alex Lim
Sent:   Wednesday, April 26, 2000 12:22 AM
To:     fwz
Subject:        [fw-wiz] Reading firewall logs

Hi,

I am hoping to hear some enlightening comments on reading firewall logs.
I am curious if people are actually doing it or is there some kind of
tools that we can buy off the shelf. I dun think it's productive or
efficient to ask an employee to spend a few hours reading the logs just
to look out for anomalies.

Anyone care to comment ? BTW I am referring to the Checkpoint FW-1 logs.

TIA
Alex Lim