Submit a ticketCall us

Solarwinds & Cisco Live! Barcelona
Join us from the 29th of January to the 2nd of February at Cisco Live 2018 in Barcelona, where we will continue to show how monitoring the network with SolarWinds will keep you ahead of the game. At our booth (WEP 1A), we will demonstrate how SolarWinds network solutions can help. As a bonus, we are also hosting a pre-event webinar - Blame the Network, Hybrid IT Edition with our SolarWinds Head Geek™, Patrick Hubbard on January 24th - GMT (UTC+0): 10:00 a.m. to 11:00 a.m. There's still time to RSVP.

Home > Success Center > Log & Event Manager (LEM) > Integrate SonicWall firewalls with SolarWinds LEM

Integrate SonicWall firewalls with SolarWinds LEM

Table of contents
Created by Justin Rouviere, last modified by MindTouch Content Copy on Nov 13, 2015

Views: 2,018 Votes: 1 Revisions: 18


This article discusses how to forward SonicWall logs with the LEM Manager and how to add a SonicWall connector in the LEM Console.


  • All LEM versions
  • All SonicWall versions


Forward SonicWall logs to your LEM Manager

  1. Connect to your SonicWall firewall using a web browser on a computer that is on the SonicWall LAN.

  2. Log in using administrator credentials for your SonicWall firewall.
  3. Click Log > Log Settings.
  4. In the Syslog Server field, enter the IP address of your LEM Manager which you can find in the LEM Console under Manage > Appliances. 
  5. Verify that the Local Interface and Outbound Interface selections are correct.
  6. Click Submit. 
  7. Click Restart when SonicWall prompts you to restart the firewall. This should apply your changes. 


Add a SonicWall connector in your LEM Console

  1. Go to the Manage > Appliances view in the LEM Console and log on to the LEM Manager where you can configure the connector. 

  2. Click the Gear icon next to the LEM Manager, and select Connectors.
  3. In the Connector Configuration window, enter SonicWall in the search box at the top of the Refine Results pane.
  4. Click the Gear icon next to the SonicWall connector, and select New.
  5. Replace the Alias value with a more descriptive connector alias. We recommend using the word firewall in your firewall connector alias. This helps the Firewall filter to function correctly.
  6. Leave the Log File value set to its default value. This is because SonicWall does not allow you to change the logging location of its log files.
  7. Click Save.
  8. Click the Gear icon next to the new connector, and select Start. The Status icon will turn green to indicate the connector has started.
  9. Click Close to exit the Connector Configuration window.

Once the connector starts running, the default Firewall filter will begin displaying alerts from your SonicWall firewall, provided you assigned the appropriate alias in Step 5.

Note: The conditions for the default firewall filter read... Any Alert.ToolAlias = *Firewall*, where the asterisks serve as wildcard characters. If the connector alias defined in Step 5 does not contain the word firewall, the default filter will not work until it has been edited to match the alias you defined.



Last modified