NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] IP-Accounting



Title: Message
Mainly because it's documented in many performance tuning guides for Firewall-1 that Accounting imposes serious overhead.  Chances are that Accounting will provide you with much more information than you would ever be interested in anyway.  Long logging tends to be more than sufficient for most cases.
 
You really need to determine whether you have a business case for the additional information provided by the Accounting feature, or if you just "want" to do it.  As I mentioned, it will probably provide you with more information than you'd be interested in.
 
You be the judge.
 
-Jeff Hochberg
-----Original Message-----
From: Jarrett Goetz [mailto:[email protected]]
Sent: Saturday, March 17, 2001 2:32 AM
To: '[email protected]'
Cc: [email protected]; [email protected]
Subject: RE: [FW1] IP-Accounting

Jeff, what are the primary reasons not to leave accounting on all the time?  At least on a small-medium size corporate firewall... (I am not talking about data center class applications in which memory, high bandwidth, etc. are necessary.)

Thanks.

Jarrett

-----Original Message-----
From: Jeff Hochberg [mailto:[email protected]]
Sent: Friday, March 16, 2001 11:40
To: [email protected]; [email protected]
Subject: RE: [FW1] IP-Accounting


First of all, you really shouldn't use Accounting as a logging option unless you really need to.  This should only be enabled on an as needed basis as opposed to leaving it on all the time.

The reason why you are not seeing the entries in the log viewer is because you are not looking in the correct place.  In the toolbar, there is a drop down selection that defaults to "Log".  Click that and switch it to "Account".

-Jeff Hochberg

-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of [email protected]

Sent: Wednesday, March 14, 2001 9:18 AM
To: [email protected]
Subject: [FW1] IP-Accounting





Hi there,

is somebody of you aware on how to use FW1 to do IP accounting? I know, there is the posibility to have this activated on the rules BUT a) how do I get this information out of FW1 in a human-readable-format and b) how can I account AND have no logging in the logviewer?

Thanx,
Marco




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.