Audit logging is also an important security measure. You should always enable logging of accesses and configuration changes, and check the logs regularly to look for violations. This also provides accountability in the event that someone performs an unauthorized action. In a large SAN, use Syslog (if supported by your management application) to centralize logging.