WSM User Guide - WatchGuard Technologies
WSM User Guide - WatchGuard Technologies WSM User Guide - WatchGuard Technologies
Setting Global Logging and Notification Preferences4 Click Save Changes or Close.The Log Server interface closes and saves your entries. The new configuration starts immediately.The Log Server restarts automatically.Scheduling automated reportsIf you have created network activity reports using Historical Reports, you can schedule the Log Servercomponent to automate the reports. You first must create a report in Historical Reports, or it does notappear in the Log Server interface.1 Click the Reports tab.2 Use the radio buttons to set the time interval for reports: daily, weekly, first day of the month, or at acustom time.3 From the Next Scheduled Report drop-down list, select a date and time for the subsequentscheduled report.4 Click Save Changes or Close.The Log Server interface closes and saves your entries. The new configuration starts immediately.The Log Server restarts automatically.88 WatchGuard System Manager
About Log MessagesControlling notificationYou can configure the Firebox to send an e-mail message when a specified event occurs. Use the Notificationtab to configure the destination e-mail address.1 Click the Notification tab.2 Type the e-mail address and the mail host for notification e-mail messages.Notification e-mail messages have the format firebox_name@[firebox_ip_address]. Make sure that the SMTPserver can handle this format.Consider changing the default values. If the logging host does not resolve to an FQDN, and the receiving MX serverdoes reverse lookups, the e-mail might be discarded.3 Click Save Changes or Close.The Log Server interface closes and saves your entries. The new configuration starts immediately.The Log Server restarts automatically.Starting and stopping the Log ServerYou can manually stop or start the Log Server:• To start the Log Server, right-click the Log Server icon on the toolbar and select Start Service.• To stop the Log Server, right-click the Log Server icon on the toolbar and select Stop Service.About Log MessagesWatchGuard® System Manager includes strong and flexible log message tools. An important feature of agood network security policy is to log messages from your security systems, to examine those recordsfrequently, and to keep them in an archive. You can use logs to monitor your network security and activity,identify any security risks, and address them.The WatchGuard® Firebox X Core and Firebox X Peak send log messages to a shared log managementsystem called the Log Server. They also can send log messages to a syslog server or keep logs locally onthe Firebox. You can choose to send logs to either or both of these locations.You can use Firebox System Manager to log messages in the Traffic Monitor tab. For more information,see the “Monitoring Firebox Status” chapter. You also can examine log messages with LogViewer. Thelog messages are kept in an XML file with a .wgl.xml extension in the WatchGuard directory on the logserver. To learn more about the format of log messages, see the “Log Messages” chapter in the ReferenceGuide.User Guide 89
- Page 56 and 57: Monitoring Firebox TrafficMonitorin
- Page 58 and 59: Clearing the ARP CacheLearning more
- Page 60 and 61: Using the Performance Console2 From
- Page 62 and 63: Using the Performance ConsoleWorkin
- Page 64 and 65: Viewing Number of Connections by Po
- Page 66 and 67: Viewing Information About Firebox S
- Page 68 and 69: Viewing Information About Firebox S
- Page 70 and 71: Viewing Information About Firebox S
- Page 72 and 73: Using HostWatchWhile the top part o
- Page 74 and 75: Using HostWatchPausing the HostWatc
- Page 76 and 77: Working with Licenses3 Below Option
- Page 78 and 79: Working with Licenses2 Expand Licen
- Page 80 and 81: Setting a Friendly Name and Time Zo
- Page 82 and 83: Changing the Firebox Passphrases10
- Page 84 and 85: Recovering a FireboxTo manually res
- Page 86 and 87: Recovering a Firebox68 WatchGuard S
- Page 88 and 89: Opening a Configuration Fileto a se
- Page 90 and 91: About Firebox Backup ImagesSaving a
- Page 92 and 93: Working with AliasesAlias names are
- Page 94 and 95: Using Global SettingsEnable TOS for
- Page 96 and 97: Managing a Firebox from a Remote Lo
- Page 98 and 99: Managing a Firebox from a Remote Lo
- Page 100 and 101: Setting Up the Log ServerSetting Up
- Page 102 and 103: Setting up the Firebox for a Design
- Page 104 and 105: Setting Global Logging and Notifica
- Page 108 and 109: Types of Log MessagesTypes of Log M
- Page 110 and 111: LogViewer SettingsLogViewer Setting
- Page 112 and 113: Using LogViewerSearching in LogView
- Page 114 and 115: Using LogViewerTo convert a log fil
- Page 116 and 117: Changing Firebox Interface IP Addre
- Page 118 and 119: Changing Firebox Interface IP Addre
- Page 120 and 121: About Multiple WAN Support3 Under H
- Page 122 and 123: About Multiple WAN SupportConfiguri
- Page 124 and 125: Adding Secondary NetworksIf your Fi
- Page 126 and 127: Configuring Dynamic DNSMake sure th
- Page 128 and 129: Configuring RoutesFor more informat
- Page 130 and 131: Configuring Related Hostsfor that I
- Page 132 and 133: Using Dynamic NATUsing Dynamic NATD
- Page 134 and 135: Using 1-to-1 NAT4 Click OK. Save th
- Page 136 and 137: Using 1-to-1 NATa VPN tunnel is con
- Page 138 and 139: Configuring Static NAT for a Policy
- Page 140 and 141: How User Authentication Worksvent a
- Page 142 and 143: Configuring the Firebox as an Authe
- Page 144 and 145: Configuring the Firebox as an Authe
- Page 146 and 147: Configuring SecurID Authentication6
- Page 148 and 149: Configuring LDAP Authentication3 In
- Page 150 and 151: Configuring a Policy with User Auth
- Page 152 and 153: Configuring a Policy with User Auth
- Page 154 and 155: Using Default Packet Handling Optio
About Log MessagesControlling notificationYou can configure the Firebox to send an e-mail message when a specified event occurs. Use the Notificationtab to configure the destination e-mail address.1 Click the Notification tab.2 Type the e-mail address and the mail host for notification e-mail messages.Notification e-mail messages have the format firebox_name@[firebox_ip_address]. Make sure that the SMTPserver can handle this format.Consider changing the default values. If the logging host does not resolve to an FQDN, and the receiving MX serverdoes reverse lookups, the e-mail might be discarded.3 Click Save Changes or Close.The Log Server interface closes and saves your entries. The new configuration starts immediately.The Log Server restarts automatically.Starting and stopping the Log ServerYou can manually stop or start the Log Server:• To start the Log Server, right-click the Log Server icon on the toolbar and select Start Service.• To stop the Log Server, right-click the Log Server icon on the toolbar and select Stop Service.About Log Messages<strong>WatchGuard</strong>® System Manager includes strong and flexible log message tools. An important feature of agood network security policy is to log messages from your security systems, to examine those recordsfrequently, and to keep them in an archive. You can use logs to monitor your network security and activity,identify any security risks, and address them.The <strong>WatchGuard</strong>® Firebox X Core and Firebox X Peak send log messages to a shared log managementsystem called the Log Server. They also can send log messages to a syslog server or keep logs locally onthe Firebox. You can choose to send logs to either or both of these locations.You can use Firebox System Manager to log messages in the Traffic Monitor tab. For more information,see the “Monitoring Firebox Status” chapter. You also can examine log messages with LogViewer. Thelog messages are kept in an XML file with a .wgl.xml extension in the <strong>WatchGuard</strong> directory on the logserver. To learn more about the format of log messages, see the “Log Messages” chapter in the Reference<strong>Guide</strong>.<strong>User</strong> <strong>Guide</strong> 89
Change language