WatchGuard Firebox System 7.0 User Guide

Chapter 12: Setting Up Logging and NotificationMultiple log hosts operate in failover, not redundant mode.The primary log host handles the bulk of the loggingduties; others are called in as needed when the highestrankinglog host is unavailable to receive logs.Before setting up a log host, you need to have the followinginformation:• IP address of each log host• Encryption key to secure the connection between theFirebox and log hosts• Priority order of primary and backup log hostsFor log host troubleshooting information, see the followingFAQ:https://support.watchguard.com/advancedfaqs/log_troubleshootinghost.aspAdding a log hostFrom Policy Manager:1 Select Setup => Logging.The Logging Setup dialog box appears.2 Click Add.The Add IP Address dialog box appears, as shown in thefollowing figure.3 Enter the IP address to be used by the log host.When typing IP addresses, type the digits and periods insequence. Do not use the TAB or arrow key to jump past theperiods. For more information on entering IP addresses, see“Entering IP addresses” on page 43.4 Enter the encryption key that secures the connectionbetween the Firebox and the log host.The default encryption key is the status passphrase set in theQuickSetup Wizard. You must use the same log encryption keyfor both the Firebox and the WatchGuard Security EventProcessor.204 WatchGuard Firebox System