Submit a ticketCall us

Webinar: Web Help Desk for HR, Facilities and Accounting Departments
This webinar will focus on use cases for HR, Facilities and Accounting.

Having a unified ticketing and asset management system for all the departments in your company can provide end-users with a seamless experience and make things easier for your IT team. Yet, with different business tasks and objectives, many departments don’t fully understand the capabilities of Web Help Desk and how the software can be customized for effective use in their departments.
Register Now.

Home > Success Center > Log & Event Manager (LEM) > Integrate SonicWall firewalls with SolarWinds LEM

Integrate SonicWall firewalls with SolarWinds LEM

Table of contents
Created by Justin Rouviere, last modified by MindTouch Content Copy on Nov 13, 2015

Views: 266 Votes: 1 Revisions: 18

Overview

This article discusses how to forward SonicWall logs with the LEM Manager and how to add a SonicWall connector in the LEM Console.

Environment

  • All LEM versions
  • All SonicWall versions

Steps

Forward SonicWall logs to your LEM Manager

  1. Connect to your SonicWall firewall using a web browser on a computer that is on the SonicWall LAN.

  2. Log in using administrator credentials for your SonicWall firewall.
  3. Click Log > Log Settings.
  4. In the Syslog Server field, enter the IP address of your LEM Manager which you can find in the LEM Console under Manage > Appliances. 
  5. Verify that the Local Interface and Outbound Interface selections are correct.
  6. Click Submit. 
  7. Click Restart when SonicWall prompts you to restart the firewall. This should apply your changes. 

 

Add a SonicWall connector in your LEM Console

  1. Go to the Manage > Appliances view in the LEM Console and log on to the LEM Manager where you can configure the connector. 

  2. Click the Gear icon next to the LEM Manager, and select Connectors.
  3. In the Connector Configuration window, enter SonicWall in the search box at the top of the Refine Results pane.
  4. Click the Gear icon next to the SonicWall connector, and select New.
  5. Replace the Alias value with a more descriptive connector alias. We recommend using the word firewall in your firewall connector alias. This helps the Firewall filter to function correctly.
  6. Leave the Log File value set to its default value. This is because SonicWall does not allow you to change the logging location of its log files.
  7. Click Save.
  8. Click the Gear icon next to the new connector, and select Start. The Status icon will turn green to indicate the connector has started.
  9. Click Close to exit the Connector Configuration window.

Once the connector starts running, the default Firewall filter will begin displaying alerts from your SonicWall firewall, provided you assigned the appropriate alias in Step 5.

Note: The conditions for the default firewall filter read... Any Alert.ToolAlias = *Firewall*, where the asterisks serve as wildcard characters. If the connector alias defined in Step 5 does not contain the word firewall, the default filter will not work until it has been edited to match the alias you defined.

 

 

Last modified
14:39, 13 Nov 2015

Tags

Classifications

Public