Solved

Cisco ASA 5520 - FW log analyzer

Posted on 2009-07-07
3
1,778 Views
Last Modified: 2013-11-16
There are millians of lines of log report getting from FW on every hour. Is there any tool to analyze the log pattern and give us the details of each level ( info to emergency level ? )

Recommend to have Open source if not, commercial is okey?
0
Comment
Question by:Sriram_pp
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 23

Accepted Solution

by:
debuggerau earned 125 total points
ID: 24800840
the logs should contain those levels already, if you want them broken up and grouped, might be better to do that on the ASA as you can have multiple alert sets.

But as far as third party solutions:
http://syslog-archiving.qarchive.org/
0
 
LVL 34

Assisted Solution

by:Istvan Kalmar
Istvan Kalmar earned 125 total points
ID: 24801899
Hi,

I use AdventNet Manege Engine Firewall Analyzer, it has a grapical interface, very useful program!
It saves the logs into SQL database!

http://www.manageengine.com/products/firewall/download.html
0
 

Author Closing Comment

by:Sriram_pp
ID: 31600967
Both the tools are most useful
0

Featured Post

Is your NGFW recommended by NSS Labs?

Ours is! NSS Labs Next Generation Firewall Test gives the WatchGuard Firebox M4600 a "Recommended" rating! Curious where your NGFW landed on the  Security Value Map? See the map and download the full report today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
Come and listen to Percona CEO Peter Zaitsev discuss what’s new in Percona open source software, including Percona Server for MySQL (https://www.percona.com/software/mysql-database/percona-server) and MongoDB (https://www.percona.com/software/mongo-…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question