Can you Trust Syslog?

• Good enough for many cases

• BUT

  • Not 100% reliable delivery (UDP based)
  • Sender address can be easily faked
  • Open to replay attacks
  • ... and more

• If you deploy syslog, spend some time thinking on how to do it securely!

• Again, newer standards provide better protection