watchguard firebox : Define where the Firebox sends log messages

Define where the Firebox sends log messages

You can configure your Firebox to log events that occur at the Firebox. You can then examine the log files and make decisions about how to add more security to your network.You must tell the Firebox where to send log messages.

1.     From Policy Manager, select Setup > Logging.
The Logging Setup dialog box appears.

2.     Configure the logging settings for the WatchGuard Log Server, syslog server, and Firebox Internal Storage.
The available options are described below.

WatchGuard Log Server

Select the Send log messages to the log servers at these IP addresses check box to send log messages to your Log Servers. A Firebox can send log messages to a Log Server and a syslog server at the same time.

Click Configure to add or edit the IP addresses for your Log Servers. For more information, see Add a Log Server.

Syslog Server

Select the Send log messages to the Syslog server at this IP address check box to send log messages to your syslog server. A Firebox can send log messages to a Log Server and a syslog server at the same time.

Click Configure to add or edit the IP addresses for your syslog server. For more information, see Configure syslog.

Firebox Internal Storage

Select the Send log messages in Firebox internal storage to enable the Firebox to store the log messages.

Performance Statistics

By default, the Firebox sends log messages about external interface performance and VPN bandwidth statistics to your log file. To disable this type of log message, see Disable performance statistic logging.

Advanced Diagnostics

To set the level of diagnostic logging to write to your log file or to Traffic Monitor for each logging category, see Enable advanced diagnostics.

 SP