Is there a good log analysis tool available from the manufacturer, or are third party log analysis tools available?
Ideally you want tools that will let you see the one month history of those IP remote addresses that have caused firewall events in the past 24, 48 or 72 hours. Also they should have the ability to show events from only those remote IP addresses that have caused events on more than one local port. For some products, third party log analysis tools are available that will provide this capability. There is more on this topic here: /faq/8226 3. If the router or firewall is wireless, secure the wireless interface. These days many routers and firewalls include both wired and wireless capabilities. And there is not always a visible antenna. Be sure to check the router’s manual to see if it has a wireless capability. If it does, either disable the wireless interface, or configure the wireless interface so it is properly secured. /faq/8698 4. Firewalls are not a replacement for adequate backups of data. (Firewalls don’t protect against real fires, or burglars.) /faq/10194 5. Other security prec
Related Questions
- Is there a reason for an equipment manufacturer to invest in third party tool testing other than to satisfy a customer requirement?
- Is there a good log analysis tool available from the manufacturer, or are third party log analysis tools available?
- How does the Log Analysis tool work with IIS log files?
