Firewall Policy Change Events on SSIM
Updated: 21 May 2010 | 2 comments
Hi,
Can we monitor events on Firewall Policy Change through SSIM? Any specific Rule Set for that?
Kind Regards
Raul
discussion Filed Under:
Hi,
Can we monitor events on Firewall Policy Change through SSIM? Any specific Rule Set for that?
Kind Regards
Raul
Comments
From what firewall products
From what firewall products are you collecting events?
You will have to look at the Event Type ID.
For example run a event query like the below on and see what you find.
Product=<Your FW-Product> AND Event Type ID=Configuration Change Succeeded
Hi Olaf, Hope alls well
Hi Olaf,
Hope alls well :) Thanks for your reply. Can we get exactly what all changes are made from this query?
Kind Regards
Raul
Would you like to reply?
Login or Register to post your comment.