[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] ELA proxy
Pete, Webtrends uses LEA (Log Export API), not ELA. LEA is the opposite of ELA; it allows FW-1 to send events to a 3rd party reporting application. Although it is possible to use Webtrends with manually exported log files, I believe they recommend using LEA as the preferred interface between the two. Per Check Point: "WebTrends Firewall Suite integrates with the Log Export API (LEA) of the OPSEC architecture in VPN-1/FireWall-1. When LEA is used, a secure connection is set up between WebTrends Firewall Suite and VPN-1/FireWall-1. This connection provides the mechanism that safely and securely transfers data between the firewall and the analysis engine. By encrypting data at the firewall, LEA ensures that firewall logs are not tampered with during transport. The LEA connection also facilitates the creation of real-time reports without the need to export complete log files at every update interval, saving time and bandwidth resources." Also see: ftp://ftp.webtrends.com/firewall/fw_cg.pdf HTH, Mark L. Decker Rainfinity [email protected] www.rainfinity.com> -----Original Message----- > From: Peter SoCalGuy [mailto:[email protected]] > Sent: Wednesday, March 21, 2001 4:44 PM > To: [email protected]; [email protected] > Subject: RE: [FW1] ELA proxy > > I am using Webtrends Firewall suite to analyze the firewall > logs. Would that > require ELA proxy? > > Thanks, > Pete > > > >From: "Mark Decker" <[email protected]> > >Reply-To: <[email protected]> > >To: "Peter SoCalGuy" <[email protected]>, > ><[email protected]> > >Subject: RE: [FW1] ELA proxy > >Date: Wed, 21 Mar 2001 16:21:41 -0800 > > > >ELA is Extended Logging API, a mechanism for 3rd party OPSEC > vendors to > >log their events to the FW-1 logs. Check with Support, but I don't > >think it's needed if you don't have any 3rd party tools using it. -m > > > > > -----Original Message----- > > > From: [email protected] > > > [mailto:[email protected]]On > Behalf Of > > > Peter SoCalGuy > > > Sent: Wednesday, March 21, 2001 3:50 PM > > > To: [email protected] > > > Subject: [FW1] ELA proxy > > > > > > > > > > > > Hello everybody, > > > > > > Does anyone know what the ELA proxy is for? It creates some > > > log files but I > > > am not sure what they mean. > > > Is ELA proxy required for proper operation of Firewall-1 v4.1 > > > SP2? If not, > > > I'll just disable it. > > > > > > Thanks for your help, > > > Pete ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|