Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: Firewall log entries and web server entries discrepancies |
|---|---|
| Date: | Mon, 3 Apr 2006 05:46:02 -0700 (PDT) |
I cannot speak to what and how often the web server is logging for a
particular TCP connection, but Checkpoint does not create a log entry for each
packet once it has created the first log entry. This can be adjusted in the
Policy Global Properties Log and Alert Time settings.
MDong@cds.ca wrote:
Hi,
I have a web server behind a firewall. On the web server log, it shows there
are 10,000 entries [concurrent sessions] within an hour from a particular
source IP accessing this web server. But on the CheckPoint firewall, it only
shows there are 100 entries within an hour from the same source to the web
server. Why is this log discrepancies? They log different things? Must be some
basic concept I am missing here...
Thanks for your help.
---------------------------------
Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US (and 30+
countries) for 2¢/min or less.
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Next by Date: | RE: pix 506e vs iptables ?, David Ball |
|---|---|
| Next by Thread: | RE: pix 506e vs iptables ?, David Ball |
| Indexes: | [Date] [Thread] [Top] [All Lists] |