syslog server

[mjerbi]

I need to manage some PIX FW and generate different activity log reports.

Does the Pix Device Manager (v3.0) include a Syslog server ? if not, where can I get one ?

Thanks in advance.

[mostiguy]

http://www.kiwisyslog.com/

They have a very popular freeware syslog server for windows. Any unix based os should have one out of the box.

PDM is a management tool. both through it and the command line interface you can view some logged details if you have logging buffered enabled, but the buffer for that is only a few hundred lines. For serious logging, you do need an external syslog server

[cpalayoor]

Syslog Server from Kiwi Enterprises comes failry recommended.

Its free and you can get it from www.kiwisyslog.com.

Regards

C P

[shannong · Accepted solution]

No. The PDM does not include syslog functionality as it is an HTML/Java web application.

Cisco has a syslog server, though I don't recommend it. The best one I have found for Windows is Kiwi Syslog. There's a freeware version and a commercial version. The commercial version will allow you to create rules to take actions on syslog messages. and also allow for filters For example, Kiwi Syslog can send you an email anytime and IDS: log message is generated on the Pix.

You can use ReportGen with Kiwi, and it is free as well. It will parse Pix syslogs from Kiwi and create HTML reports.

For *nix, syslog is part of the OS. You just need to configure the syslog.conf file.

-Shannon