SYSLOG

[robori]

Hi,


I have 2 NG-R55 firewalls in a Nokia IP300 hardware with IPSO 3.8.1 build 028 installed. I'd like to configure both of them to send the SYSLOG messages to a specific server, I saw an option in the Nokia VOYAGER to set this up but I don't know if there's anything else I should do besides configuring this via the Web interface.
Could you guys help me please ?


Thanks again,
Robori.

[chillyjim]

That should send the IPSO messages to your syslog server. You will not get firewall logs though. Check Point does not send syslog messages.

[robori]

Humm! Okay! Thanks for the info! : )

Will I need to open the 514/udp port for communication to occur or just configuring via the Voyager web int will acomplish this ?

How do I check if the "Syslog" service is running on the IPSO ?


Thanks again!

[chillyjim]

Not an IPSO person but yes the gateway will need to be allowed to send syslogs

The first thing (To see if syslog is running) is from the command line

ps auxw | grep syslog That will show if the process is running and what it's options are.

A tcpdump of the syslog port might help as well.