Check the file
cpmgmt.aud in $FWDIR/log. I don’t know if it is there on those NT things, but
under Solaris, it work beautifully. It won’t show you log in data, but it will
tell you policy changes.
Cheers,
Craig
-----Original
Message-----
From: "Schönfelder,
Sven" [mailto:[email protected]]
Sent: Wednesday, August 29, 2001
12:38 AM
To: Tucker, Tom;
[email protected]
Subject: AW: [FW1] Firewall
Managmenet Logging - Administrator Activity
Hello Tom,
this feature is added to
Check Point NG.
Bye,
Sven
-----Ursprüngliche Nachricht-----
Von: Tucker, Tom
[mailto:[email protected]]
Gesendet: Montag, 27. August 2001
21:15
An:
[email protected]
Betreff: [FW1] Firewall Managmenet
Logging - Administrator Activity
Does
CheckPoint log when a user/administrator connects via the Policy Editor? How can I monitor when a firewall
change occurs and by whom?
Thanks,
Tom