In this video:
- Configure Syslog Monitoring via Palo Alto Firewall
Syslog is a standard log transport mechanism that enables the aggregation of log data from different network devices - such as routers, firewalls, printers - from different vendors into a central repository for archiving, analysis, and reporting.
Palo Alto Firewalls can forward every type of log they generate to an external Syslog server. Using TCP or SSL for reliable and secure log forwarding, or UDP for non-secure forwarding.
- Verify Syslog Forwarding
able to connect to the DMZ server and verify that the syslogs are being forwarded. Using Xfce Terminal, I was able to ping the DMZ server address by typing ping -c4 192.168.50.10.
Also using tail -f /var/log/messages can connect the current file for any changes that are occurring. Which should show the date, source of the syslog data, and information about the traffic.
Top comments (0)