Logging outgoing smtp traffic

[mingtmak]

Network with no internal mail server has a potential spyware issue on a PC. Need to determine where the source of the infection is.

Can you log only the outgoing smtp traffic with the PIX 501, or is another add-on/Softare app needed to categorize information.

How would you this? Any assist would be greatly appreciated!



- Jon

 

[jensjuul]

You could enable the syslog? If you set it to the informational og debug level you get all the information about what your PIX is doing right now. I don't whether or not you can filter the output, but you could just "record" the data and then do a search.

The syslog sends out on UDP/514 but you can change this if you want to.