Security Basics mailing list archives

Firewall Logging question?


From: "Albert R. Campa" <abcampa () gmail com>
Date: Mon, 19 May 2008 16:26:35 -0500

Hi,

I am wondering what your opinion is on Firewall logging for
"Accept/Permit/Allow" rules?

Is it really necessary? Are just the "deny" logs critical?
Say disk space is not in abundance.

Should you not log "accept/permit/allow" firewall rules, or log
everything and have your retention reduced?

What are advantages to logging "accept/permit/allow" rules in a firewall?

Thank in advance.

Albert


Current thread: