WatchGuard Firebox System 4.6 User Guide

Setting global logging and notification preferencesSetting the log encryption keyThe log connection (but not the log file) between the Firebox and an Event Processoris encrypted for security purposes. Both the Management Station and the EventProcessor must possess the same encryption key.You must enter an encryption key in order for the Event Processor to receivelogs from the Firebox. It must be the same key used when adding an EventProcessor to the Management Station.From the LiveSecurity Event Processor:1 Select File => Set Log Encryption Key.2 Enter the log encryption key in both text boxes. Click OK.Setting global logging and notification preferencesThe LiveSecurity Event Processor lists the connected Firebox and displays its status. Ithas three control areas:• Log File tab – Specify the maximum number of records stored in the log file.• Reports tab – Schedule regular reports of log activity.• Notification tab – Control to whom and how notification takes place.Together, these controls set the general parameters for most global event processingand notification properties.Setting the interval for log rolloverLog records accumulate at different rates depending on the volume of network trafficand the logging and notification settings configured for services and properties. Youcan control when the Event Processor rolls log entries from one file to the next usingthe Log Files tab in the Event Processor. For example, configure the Event Processorto roll over from one log file to the next by time interval, number of entries, or both.From the Event Processor interface:1 Click the Log Files tab.2 For a time interval, enable the By Time Interval checkbox. Select the frequency.Use the Schedule First Log Roll For drop list to select a date. Use the scroll controlor enter the first time of day.3 For a record size, enable the By Number of Entries checkbox. Use the scroll controlor enter a number of log record entries.The Approximate Size field changes to display the approximate file size of the final log file. For adetailed description of each control, right-click it, and then select What’s This?.4 Click OK.The Event Processor Interface closes and saves your entries. New settings take effectimmediately.User Guide 75