Audit Trails

By Joshua Erdman
Digital Foundation, inc.

If you want to track every move a person makes when they access a resourse on the inside of your firewal, then Audit Trails are the way to go. Audit Trails are logs of each command issued over your firewall, they are created by the Firewall utility that understands the communication of each type of traffic you want to monitor.

Example

If you wanted to monitor your FTP server and you used an audit Trail, every FTP command, the IP address of the host that sent the command, and the time and date the command was sent would be kept in a log file, for FTP this would also include the username that was used to log in. Then if you ever needed to look through the logs to see why a special file is now deleted, you could sift through these audit trails on your FTP server looking for a delete command.

Article last reviewed: 05/10/2004

del.icio.us

Created by: Digital Foundation, inc.

All content of the NetworkClue website is copyrighted. Articles, notes, outlines, and all other materials may not be stored on the Internet or sold or placed by themselves or with other material in any electronic or printed format in whole or part. However materials may be referenced by links to the site.