|
Logging of access and communications for Serial Port activity
In Console Server mode, the Opengear console servers all support logging of access to, and communications with serial port consoles and devices.
For each port, you also must specify the level of logging that is to be maintained. Select Serial & Network: Serial Port and Edit:
- Level 0 - Turns off logging for that selected port
- Level 1 - Logs all user connection events to the selected Port
- Level 2 - Logs all data transferred using to/from the selected Port, and all user connection events.
The data logged in Level 2 is the data traffic between the serial Port and the console server (and for remote connection to the serial port through the console server using SSH it does not include any SDT SSH encryption etc). So if Telnet was used for control of a router/firewall's text console and all local and remote was undertaken securely through the console server, then the logged data could be analyzed to see any connections made to the firewall's management console and which options had been reconfigured, when and by which user.
Before activating Serial or Network Port logging, you must specify where those logs are to be saved. At the Alerts & Logging: Port Log menu you can specify the remote storage server to be used, and server access details. With the IM4200 and IMG4000 gateways you can also store the logs on the USB flash.
In addition to the logs which are transmitted for remote/USB flash storage, a cache of the most recent 8K of logged data per serial port is maintained locally (which you can view by selecting Manage: Port Logs).
|
