These reports can be captured by an audit service and recorded in logs that can then be processed and archived. The correct enforcement of security rules can similarly be achieved by means of an automatic tool based on network management technologies such as SNMP and CMIP, by defining the rules as MIB objects. Monitoring Firewall Activities Monitoring firewall activities is essential, yet often overlooked. Most IT managers do not have a schedule that permits analyzing log files all day. There are a number of monitoring products available that allow administrators to create rules about what to watch for and how to respond, if and when something goes wrong.
Products range from high-end security solutions to simple shareware applications.
Watcher is designed for the UNIX operating system, a platform commonly used for the hosting of commercial Web sites venturing into e-commerce. Watcher is a freeware tool that can be used to set alarms to notify administrators when an attack or some other suspicious behavior is underway. Although utilities such as Watcher are useful, agencies building a foundation for a secure environment to protect activities and data should consider viable, commercially available alternatives. The decision of which type of security monitoring solution to use depends on the goals and requirements of each organization. Alarm notification of attempted break-ins.