SchoolsBroadband don't necessarily log what could be vital to you

[Jawloms]

SchoolsBroadband didn't have logging on our firewall on. This came up when I asked them the other day about any other services they provided. They replied with;

 

Please let me know if you would like us to enable logging on the firewall. This is a free service and wouldn't change anything in terms of security but it would mean you would have access to the logs if you needed them again in the future.

 

I mean, if it's a free service, why isn't it already on logging? It's not even that they were logging stuff but we as customers can't get to the logs, there simply are no logs.

 

I strongly advise any SBB customers to get in touch and check it's on.

 

Stuart

[FN-GM]

I would recommend that people make this requirement during the initial procurement and deployment stage. This would have ensured that logging is enabled before going into service.

[SchoolsBroadband]

SchoolsBroadband didn't have logging on our firewall on. This came up when I asked them the other day about any other services they provided. They replied with;

 

 

 

I mean, if it's a free service, why isn't it already on logging? It's not even that they were logging stuff but we as customers can't get to the logs, there simply are no logs.

 

I strongly advise any SBB customers to get in touch and check it's on.

 

Stuart

 

Hi Stuart,

 

we do offering full firewall logging as part of our Analytics package which is in addition to the UTM package. This is known as FortiAnalyzer and is a simple bolt-on to the current package.

 

This is how FortiGate firewalls log and analyze data and is not unique to us. There's also 3rd party products such as FastVue which also do the same. Other than that I think we can also send all logs from a single VDOM / virtual firewall to any syslog server you require. We find that 99% of customers do not wish to buy FortiAnalyzer as its an increased cost most don't value enough. It is thought available to anyone that wants it. If you haven't been offered this then please do let me know and I'll get someone to discuss with you. You can tailor which data you want to log and which you don't (otherwise disks can get full very quickly)

 

We store all of our Netsweeper filtering logs for 2 years currently which is separate to firewall logs.

 

Thanks

 

Dave

[Jawloms]

I've DM'd you, but my request was basically "What additional services do you offer for network protection" and this was the response, and the offer of a WatchGuard AV quote. And the point still stands of why is logging firewall traffic an option if it costs nothing? Maybe I should have checked when we signed up that you do log the firewall traffic, but when logging is such a big part of the service provided for obvious reasons around student/staff Internet activity you kind of assume........

 

I also replied to the ticket and have had no response.

[filteringtech]

Hopefully it won't take as long as mine do to get a response. I have three tickets that have, or are about to have their one month birthdays! None of them difficult and all related to safeguarding/KCSIE filtering issues.