keep track of firewall rule change

garykam · ‎11-10-2008

Is there a cheap(or free) solution/software out there that can keep track of the firewall fule changes people make to the ASA/PIX? I want to know what changes have been made, who made the change and what time it happened. I believe the Cisco Security Manager can do that. Are there any other solutions out there?

husycisco · ‎11-11-2008

Hello Gary,

I think this is possible only using accounting. Free Radius may handle this

http://freeradius.org/features.html.

Regards

cisco24x7 · ‎11-11-2008

That can be easily done with either Cisco

Secure ACS (cost money) or freeware tacacs

(FREE)

There is a vendor out there called Firemon.

It can keep track of changes on the firewall

and compared the differences. It works quite

well on Checkpoint firewalls, Nokia appliances

and Cisco IOS routers. I have not tried it

with ASA. This is a comercial software so it

costs money. The alternative is to use RANCID

which can do the same thing.

my 2c.