Security data analyzing method for building up security audit trail for computer network fire-walls in which data is processed locally before being sent to a central server to reduce data traffic and central processing

摘要

Method has the following steps: memorization of each security event occurring at each fire-wall (100, 200, 300) over a fixed period to build up log file for each fire-wall or a security audit trail. The data is then processed by a specific agent for each fire-wall loaded in the fire-wall itself or a local computer connected to it. Lastly the processed data is sent to a central administrating server (2). An Independent claim is made for a device for security traffic analysis relating to a wide area network (WAN) comprising a number of groups (10, 20, 30) of computers each with a fire-wall (100, 200, 300) connected to an administration server (2) over a network (3).