cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
307
Views
5
Helpful
4
Replies

Reporting (OT?)

paulc
Level 1
Level 1

My apologies if this is off-topic for this forum. Our f/w is a 515e and it logs to a syslog server. My question for the group is do you know or use any kind of web reporting software?

We had an issue just recently where a laptop was severely infected with malware. The director wanted to know where the user had been as the history had been erased. I can use the logs produced by the Pix but as you know they can be a pain to compile into a report for a non-techie.

Thanks.

4 Replies 4

Farrukh Haroon
VIP Alumni
VIP Alumni

Do you want a syslog analysis tool for the PIX or for your AAA Server? If PIX (please see below) and if AAA/ACS have a look at 'extraxi'. They are a Cisco partner and they do a great job with ACS reporting.

This is from an older post:

Have you looked at Cisco MARS? (Its actaully a SEM)

http://www.cisco.com/en/US/products/ps6241/products_data_sheets_list.html

http://www.sawmill.net/features.html

(Found it to be pretty nice)

If you want a real-time (bandwith monitoring tool, fireplotter is pretty cool:

www.fireplotter.com

Alternates:

http://manageengine.adventnet.com/products/firewall/

(never tried it tough)

http://www.eventid.net/firegen/firegenpix2.asp

(had serious performance issues)

Some more:

http://www.windowsecurity.com/software/Firewall-security-log-analyzers/

Please rate if helpful

Regards

Farrukh

Thanks a lot, Farrukh! Very helpful and rated as such.

No problem, glad I could help :)

Can't see the rating tough :)

Regards

Farrukh

Should be there now (think I forgot to hit the Submit button).

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: