topic Re: PIX log analysis tools in Network Security

PIX log analysis tools

admin_2 — Fri, 21 Feb 2020 07:21:32 GMT

Not sure if any of you know the Checkpoint real-time log viewer capabilities, but I'm looking for a tool that could do something similar with my PIX real-time logs. I basically want to see everything happenig on my firewall(s) in real time but presented in some readable format with an ability to sort by source/destination IP, services, actions taken etc. Also, what are some good tools for post-mortem log analysis - either open source or commercial?

Re: PIX log analysis tools

denvermtn — Thu, 22 Apr 2004 18:20:11 GMT

We use webtrends firewall suite to analyze our pix logs.

Here's a link to their web site.

http://www.netiq.com/webtrends/default.asp

Re: PIX log analysis tools

hugodrax — Sat, 24 Apr 2004 03:09:34 GMT

I use Microtik syslog http://www.mikrotik.com/download.html

which is free and lets you create filters by text content and group the messages into different folders, apply plugins to specific messages etc..

for example you can create a intranet rule that looks at URLS with /intranet/ and log and save them to a file.

It would be nice if someone can write a plugin that will send a shun command to the pix Microtik provides free the plugin SDK.