Re: SYSLOG server position

Thanks Joe,

I have mgt zone on pix through seprate interface but i
would like to go for the sandwitched switch between
the netscreen n PIX b'coz i think if i pull the logs
to the mgt zone then the netscreen logs have to pass
through PIX n this will create extra traffic on PIX.I
hope i am going for right balance ?

rgds, 
Tanvir


--- joekim13@securityfocus.com,
gmail@securityfocus.com wrote:

> Just keep in mind syslog traffic is in cleartext so
> its better to have it segmented off to a mgmt
> network or VLAN where it wouldnt' be mixed with
> internal user traffic. If you have another interface
> on the PIX u could do that as well, but if your
> short on interfaces just plug it into the outside of
> the PIX.(you'll get a message from the pix
> indicating its not secure to send syslog to the
> outside, but because u have it behind your netscreen
> which i hope is locked down it should be okay. 
>
> On the netscreen you can configure a subinterface or
> a seperate vlan and have it on the same network as
> the pix. If you are going to have the system in
> between the pix and netscreen i would atleast throw
> it on linux w/ iptables stricly allowing syslog and
> mgmt traffic only. 



                
____________________________________________________
Start your day with Yahoo! - make it your home page 
http://www.yahoo.com/r/hs