Command's to check any intrusion /hacking activities in pix 515

[raju]

Hello all ,

We have pix 515 firewall with two Interfaces , one interface for outside Network (untrusted Network ) and the other to our Internal Network (Trusted )and we have opened few ports on firewall for accessing the servers which is inside the our Network from our ISP . I would like know is there any command/log to monitor the activities like unauthorised persons (hackers ) trying to access our internal Network by any means .

Thanks.

Raju

[bhaase]

The easiset way would be to turn on syslogging on the PIX and use a PIX syslog analyzer. I recommend using syslogd for *nix servers and Kiwi Syslog daemon for Window servers.