WSM User Guide - WatchGuard Technologies

Setting up the Firebox for a Designated Log Server2 Click Configure. Click Add.The Add Event Processor dialog box appears.3 In the Log Server Address box, type the IP address of the Log Server you want to use.4 In the Encryption Key and Confirm boxes, type the Log Server encryption key. The allowed rangefor the encryption key is 8–32 characters. You can use all characters but spaces and slashes (/ or \).5 Click OK. Click OK to close the Configure Log Servers dialog box. Click OK to close the LoggingSetup dialog box.6 Save the changes to the Firebox to begin logging.You can verify that the Firebox is logging correctly. From WSM, select Tools > Firebox System Manager.In the Detail section on the left, next to Log Server, you should see the IP address of the log host.Setting Log Server priorityIf the Firebox cannot connect to the Log Server with the highest priority, it connects to the subsequentLog Server in the priority list. If the Firebox examines each Log Server in the list and cannot connect, ittries to connect to the first Log Server in the list again. You can create a priority list for Log Servers.1 From Policy Manager, select Setup > Logging.The Logging Setup dialog box appears.2 Click Configure.The Configure Log Servers dialog box appears.3 Select a Log Server from the list in the Configure Log Servers dialog box. Use the Up and Downbuttons to change the order.Activating syslog loggingSyslog is a log interface developed for UNIX but also used by a number of computer systems. You canconfigure the Firebox to send log information to a syslog server. A Firebox can send log messages to aLog Server and a syslog server at the same time, or send log messages to one or the other. Syslog logmessages are not encrypted. We recommend that you do not select a host on the external interface.1 From Policy Manager, select Setup > Logging.The Logging Setup dialog box appears.2 Select the Send Log Messages to the Syslog server at this IP address check box.3 In the address box, type the IP address of the syslog server.4 Click Configure.The Configure Syslog dialog box appears.84 WatchGuard System Manager