This is going to seem like a strange question so please bear with

Is there any way that we can log who makes changes to the filters? We
being required to create a "paper trail" so we can determine who made
filter changes and I have not been able to find any way of
this. The higher ups are concerned that someone will create/modify a

filter which would expose our institution.

We are currently on BM3.5, is this address in 3.6?

I am concerned that if we can not find a solution to this matter we
will be
forced to go to another firewall that does this and I am really
in learning how administrate a new firewall.