Monitoring a PIX

[akirkby]

I am wanting to monitor a PIX FW for attempted hacking & VPN events. Are there any white papers/ tech notes that could assist with this? I will be using Cisco Works for Windows to do the monitoring.

[Terry Pattinson]

I've used Envision for this task (www.opensystems.com). They are part of the avvid partner program. I believe www.netforensics.com also have something in this space, but I've never used it.

[adrian.grigorof]

See this link for some "real-life" notes related to the monitoring of Pix firewalls: http://www.eventid.net/firegen/pixanalysis.asp

Adrian Grigorof

www.firegen.com

Firewall Log Analyzers