Great Circle Associates Firewalls
(September 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Firewall-1 Logs
From: sj @ bear . com (Shahryar Jahangir)
Date: Tue, 3 Sep 1996 13:27:22 -0400
To: firewalls @ greatcircle . com, jwojn @ telxon . com

Jim,
	Firewall-1 logging is configurable. If you plan on doing detailed 
logging of all incoming and outgoing connections, your log file (just the log 
file not the errors file) may reach anywhere between 5-10 MB (again depending 
upon your internet usage and logging style). This usually happens if you are 
tracking http proxy connections. However, if you don'r care whether or not 
someone accesses playboy.com etc, you can skip (or at compact logging) the http 
outbound loging which will cut down tremendously on your log size.
	
	So, the size of your filesystem/drive depends upon your logging 
structure.
	For heavy logging, I use a separate filesys as well as drive (1 GB). But 
we, as a financial firm, have more to record than most other orgs. I also keep 
past logs online.


Hope this gives you some guidance.

luck

sj

:->From jwojn @
 telxon .
 com Tue Sep  3 12:57:44 1996
:->From: "Wojno, Jim" <jwojn @
 telxon .
 com>
:->To: "'firewalls @
 greatcircle .
 com'" <firewalls @
 greatcircle .
 com>
:->Subject: Firewall-1 Logs
:->Date: Tue, 3 Sep 1996 11:44:02 -0400
:->Mime-Version: 1.0
:->Content-Transfer-Encoding: 7bit
:->
:->To All:
:->
:->We are in the process of determining how much disk space we will require
:->for a Firewall-1 unit. We will be using a SPARC-20, and currently have
:->about 400 to 500 active Internet users. We would like to keep at least
:->one month worth of logging data on-line. Approximately how much disk
:->space would you recommend we have available to accomodate this.
:->
:->Any input on this would be appreciated. If this topic has already been
:->discussed, please feel free to contact me directly off-list.
:->
:->Jim Wojno
:->Systems Administrator
:->Telxon Corporation
:->jwojn @
 telxon .
 com

--
*******************************************************************************
Bear Stearns is not responsible for any recommendation, solicitation, offer or
agreement or any information about any transaction, customer account or account
activity contained in this communication.
*******************************************************************************

Indexed By Date Previous: RE: WWW servers (Again)
From: "Larson, Erik @TFN Cin" <IMCEAMS-CENTRAL_CINTI_elarson @ XLConnect . com>
Next: Re: Denied packets with no protocol??
From: Rafi Sadowsky <rafi @ tavor . openu . ac . il>
Indexed By Thread Previous: Firewall-1 Logs
From: "Wojno, Jim" <jwojn @ telxon . com>
Next: Re: Firewall-1 Logs
From: Ryan Russell/SYBASE <Ryan . Russell @ sybase . com>

Google
 
Search Internet Search www.greatcircle.com