Re: [Leaf-devel] Character Studies (of Users)

[Scott C. B. <sb...@be...>]

Matthew:

	Heya. My intepretation of:

|LO1 - Required Log Events - The Candidate Firewall Product shall 
|have the capability to log events belonging to the event types 
|described below...

	...is with emphasis on "capability to log". IE, not actual
logging all the time for everything. Eeesh.

	Hee. It is telling that the "Traffic Permitted Inbound"
of the 3.0a Criteria doesn't include SSH. ;)

-Scott

 
On Wed, 31 Jan 2001, Matt Schalit wrote:

> 
> Folks,
> 
> Mike Noyes wrote:
> > 
> 
> > Firewall Product Certification Criteria Version 3.0a
> > http://www.icsalabs.com/html/communities/firewalls/ \
> > certification/criteria/criteria_3.0a.shtml
> > 
> 
> 
> Taking a look at this, it refered to logging all acceptable and
> unacceptabe access.  That'd fill our logs in a hearbeat, then
> syslog would stop logging.
> 
> Do you concur?
> Matthew
> 
> _______________________________________________
> Leaf-devel mailing list
> Lea...@li...
> http://lists.sourceforge.net/lists/listinfo/leaf-devel
>