WatchGuard Firebox System 7.0 User Guide

Setting up the WatchGuard Security Event ProcessorFirebox time to that of the primary log host. Therefore, youshould set all log hosts’ clocks to a single source. In a localinstallation where all log hosts are on the same domain, seteach log host to the common domain controller.For Windows NT log hosts1 Go to each log host. Open an MS-DOS CommandPrompt window. Type the following command:net time /domain:domainName /setwhere domainName is the domain in which the loghosts operate.The system returns a message naming the domain controller.2 Type Y.The time of the local host is set to that of the domain controller.Another method to set the log host (and domain controller)clocks is to use an independent source such as the atomicclock—based servers available on the Internet. One place toaccess this service is:http://www.bldrdoc.gov/timefreqSetting up the WatchGuard Security EventProcessorThe WatchGuard Security Event Processor application isavailable both as a command-line utility and, on a WindowsNT or Windows 2000 host, as a service. It is, bydefault, installed on the management station when youinstall the WatchGuard Firebox System. However, youmust manually install the WSEP on all log hosts.Running the WSEP application on WindowsNT, Windows 2000, or Windows XPIf the WSEP application is to run on a Windows NT, 2000,or XP operating system, you can choose between twomethods: interactive mode from a DOS window or as aUser Guide 207