monitor changes to a PIX config

kevburgess · ‎02-02-2007

Is there an easy way to monitor what changes have been made to a PIX config? Maybe via syslog ?

thanks,

Collin Clark · ‎02-02-2007

We do it via syslog. Works well, but the biggest problem is figuring out who did it!

kevburgess · ‎02-02-2007

What level are you syslogging? Informational?

I find that the logs are huge if I go that low...

Collin Clark · ‎02-02-2007

Our security policy (actually security people) require debug! Yup over a gig of syslog data a day for one firewall. Obviously we use a script to parse out the commands entered.