Re: Is there a way to email me/page me if a change has been made
Good news! There's lots of ways!
Using a syslog daemon, you can syslog events and look for the interesting ones to create emails. Pix 6.2+ works best for this. Every command typed can be syslogged and will include the user who typed it (event # 111008). Syslog events are generated for entering config mode (event # 111007) and exiting config mode (event # 111005).
Kiwi syslog daemon for Windows create emails based on specified events such as looking for those numbers above. Swatch can do this for *nix. Also, the CatTools from Kiwi can download configs on a scheduled basis and notify you if they've changed.(but now what changed)
Also, the Pix generates a checksum at the end of it's config. You could download the config periodically via tftp and compare the checksum. If the config changes, the checksum will be different.
DeviveAuthority from Aterpoint does this very well. (not freeware) Not only for Pixs but any networking device. It will download the configs, look for changes, email them to you, and even highlight the exact lines that are different.
Of course, CiscoWOrks does this very well but is pretty darn expensive and requires alot of horsepower.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...