Auditing Firewall Admins

[tkid]

Hi, is it possible to observe the activities of the Firewall Admins, like a Audit Console or a dedicated audit logfile.

thx

[tkid]

Whats up with the the FreeBSD Auditing System:
http://www.freebsd.org/doc/handbook/audit.html

Does it work on pfsense?

[muswellhillbilly]

You can see some basic change auditing under 'Diagnostics\Backup/Restore' and then selecting the 'Config History' tab.

[cmb]

We don't include the FreeBSD auditing system bits, but that's probably not what you're looking for anyway.

Just looking for review of changes? The config history that muswellhillbilly mentioned is a built-in way. Ideally you'd want something outside of that as well, like storing your configs in a central revision control system where you have indefinite length history.