Who made the change

~Jon S~Jon S
in Firebox - Dimension, Logging and Reporting

We have many FBs with separate users configured. We also have Dimension set up for logging. The only piece we don't have is Dimension Command or WSC. Can someone tell me if there is a way to track a config change back to a firebox user?

Thanks
Jon

Comments

  • ~Jon S~Jon S

    Oh, we also have Auvik logging the changes. SO I know exactly what was changed. I just dont know who. Thx!

  • james.carsonjames.carson Moderator, WatchGuard Representative

    Hi Jon

    The firewall will log a log line whenever config changes are made -- but most users choose to use the built in admin/status users over making new ones.

    If you can see the line in Auvik, -- I'd suggest a log search in Dimension for around that time. There should be an event type log with the user name that logged in near it (admin@firebox-DB, or similar.)

    If you'd like change management type features -- setting up either dimension command or WatchGuard Management server could help provide that.

    -James Carson
    WatchGuard Customer Support

Sign In to comment.