Re: Acqusition of time

["R. DuFresne" <dufresne () sysinfo com>]

time settings can be very important if only for researching problems and
or abuses via your logs.  If the firewalls logs are off by a
day/week/month/<few hours>  from your other systems or external systems,
how does one prse their logs to correspond to abuse complaints of issues
with the firewall blocking needed accesses, or not blocking and filtering
accesses properly?  Besides there's nothing that makes a systems or
network admin look more lazy at first glance to others <auditors and mgrs,
etc> then poorly set clockings <smile>.


Thanks,


Ron DuFresne

On Wed, 29 Jan 2003, Brian Monkman wrote:

> Folks - I'm having a discussion with a few people and we have a 
> question that we are interested in getting comments from the list on.
>
> Are there any situations where a firewall's acqusition of time 
> could/should be from a network time source? Not necessarily a public 
> source, it could be an "internal" time source.
>
> If there are situations where this makes sense, should these same 
> firewalls have battery backed up clocks on board or would that be 
> unnecessary?
>
> Brian
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () honor icsalabs com
> http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        admin & senior security consultant:  sysinfo.com
                        http://sysinfo.com

"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation."
                -- Johnny Hart

testing, only testing, and damn good at it too!

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards