[FW1] NT Log control

[fw-1-mailin...@us.checkpoint.com]

Ok, I'm sure its been said before, but working with the logs on NT is kinda slow.  I monitor 2 FW1 boxes at this moment (non-enterprise) and will soon have 5.

 

The problem comes in keeping the logs clean.

 

What is the easiest way to dump everything from the current log to another file?  I've heard fw -logswitch mentioned...

 

Then from there, I'd basically like to setup a series of batch files that have the NT boxes switching logs, ftp-ing them to certain locations, then deleting the files to keep the disk usage at a minimum while allowing me to relax about logs puffing up...

 

Any help (or someone who's trying to do the same and wants someone to collaborate with) gimme a reply!

 

--Micahs

[mrobi...@sentryinc.com]

I have been looking into the same issue; however, I have been unsure about using any type of service directly off the firewall server.  Is this an unfounded concern? 

 

Michael P. Robillard, Jr.
Senior Systems Analyst
Computer Sentry Software, Inc.
615-790-8821 ext.131
www.sentryinc.com