I'm noticing that there are a LOT of items that say to push to Email when
Syslog is a viable option but there is no mandate to set up an Email server
on the system.
Personally, I'm finding that automated Syslog analysis is more ubiquitous
than automated Email alert processing and think that these should be
changed to Syslog by default since that is guaranteed to be working on the
system per the SSG.
If Email is going to be the mechanism in use, then the SSG should require
that an Email server be installed and configured properly on the local host
since firing messages off into the ether is not a guaranteed delivery
mechanism for critical alerts. Additionally, like Syslog, there would need
to be a check to ensure that the system is forwarding Email to a remote
Vice President, Onyx Point, Inc
(410) 541-6699 x788
-- This account not approved for unencrypted proprietary information --
Show replies by date