This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Anti-Violations

I've been working with Checkpoint recently- they have a logviewer similar to Astaro rules violations livelog, except they not only show denied, but allowed. Is there any feature in Astaro that can do this kind of logging?

This thread was automatically locked due to age.

0 giallu over 23 years ago

There isn't such a feature in ASL; anyway I think the ASL team should consider putting a "LOG" checkbox in packet filter definition screen so a user can decide which packets to report in the log and which not. I also think that shouldn't be too hard to do.

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 grimphyre over 23 years ago in reply to giallu

This sounds like a good idea to me too.
Cancel
Vote Up 0 Vote Down

Cancel
0 Paulo Leandro over 23 years ago in reply to grimphyre

Hi,

Regarding having the violations logged, in the rule, if you define the action as Drop the packets will be discarded and _no_ action will be logged. You'll get the packets logged only if you define the action as Deny.

Regards.
Cancel
Vote Up 0 Vote Down

Cancel
0 Markus Hennig over 23 years ago in reply to Paulo Leandro

Hi all,

thx for your thoughts.
I think we will discuss a "LOG (and go on)" target for the packetfilter for the next version of ASL.
Cancel
Vote Up 0 Vote Down

Cancel
0 Kenn over 23 years ago in reply to Markus Hennig

On a similar vein, it would be nice if you could throw in a configurable number of lines to show, and a configurable refresh time.

Thanks!

BTW- Great product!
Cancel
Vote Up 0 Vote Down

Cancel