[c-nsp] Logging your Firewalls

Wil Schultz wschultz at bsdboy.com
Fri Apr 8 13:14:39 EDT 2011


I log everything with a very few exceptions. 

I send syslog traffic to a syslog-ng server and have scripts to tar and gzip every evening and store them for 31 days on a NAS. 

-wil

On Apr 8, 2011, at 10:01 AM, Scott Voll <svoll.voip at gmail.com> wrote:

> For enterprise users, how many log ALL firewall traffic?  Both permits and
> denys?
> 
> What are you using to log the information?
> 
> How far back are you keeping the data?  What is best practice?
> 
> TIA
> 
> Scott
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/



More information about the cisco-nsp mailing list