Cisco Pix: Logging and Beyond

This document will present a 'how to' on logging of a Cisco Pix Firewall version 6.1. It will show how to implement logging via a SYSLOG locally and remotely (VPN Solution). It will also discuss some of the logging that can be done with the Cisco Pix Device Manager (PDM) which is a graphical utility that is supported by Cisco Pix Firewall version 6.0(1) and above. For a broader overview of the Cisco Pix Firewall refer to http://www.sans.org/infosecFAQ/firewall/PIX.htm. The main reason for writing this paper is to create a clear and concise configuration guide for logging of the Cisco Pix Firewall. This document assumes familiarity with working with the Cisco Pix Firewall. Most importantly before making any changes to the current security configuration be sure you have authorization to do so.'