Project Documentation

Build Log

• Important Information on OSSEC

Build Documentation

Basic Setup

• Setting up network
• Setting up routers
• Setting up fw-edge firewalls
• Setting up fw-mgmt firewalls
• Setting up web01
• Setting up log01
• Setting up mgmt01
• Setting up usr01

Setting up Splunk

• Installing Splunk
• Setting up rsyslog to monitor firewall blocks
• Monitoring usr01
• Monitoring firewalls
• Monitoring web01
• Monitoring log01
• Monitoring mgmt01
• Splunk Alerts and Dashboards

Network Diagram

• Firewall Rule List