Submit a ticketCall us

WebinarUpcoming Webinar: Know What’s Changed – with NEW Server Configuration Monitor

Change management in IT is critical. But, even with a good change management process, changes are too often not correctly tracked, if at all. The configuration of your servers and applications is a key factor in their performance, availability, and security. Many incidents can be tracked back to an authorized (and sometimes unauthorized) configuration change, whether to a system file, configuration file, or Windows® Registry entry. Join SolarWinds VP of product management Brandon Shopp to discover how the new SolarWinds® Server Configuration Monitor is designed to help you.

Register now.

Home > Success Center > Log & Event Manager (LEM) > LEM - Knowledgebase Articles > Integrate SonicWall firewalls with SolarWinds LEM

Integrate SonicWall firewalls with SolarWinds LEM

Table of contents
Created by Justin Rouviere, last modified by MindTouch Content Copy on Nov 13, 2015

Views: 2,300 Votes: 1 Revisions: 18


This article discusses how to forward SonicWall logs with the LEM Manager and how to add a SonicWall connector in the LEM Console.


  • All LEM versions
  • All SonicWall versions


Forward SonicWall logs to your LEM Manager

  1. Connect to your SonicWall firewall using a web browser on a computer that is on the SonicWall LAN.

  2. Log in using administrator credentials for your SonicWall firewall.
  3. Click Log > Log Settings.
  4. In the Syslog Server field, enter the IP address of your LEM Manager which you can find in the LEM Console under Manage > Appliances. 
  5. Verify that the Local Interface and Outbound Interface selections are correct.
  6. Click Submit. 
  7. Click Restart when SonicWall prompts you to restart the firewall. This should apply your changes. 


Add a SonicWall connector in your LEM Console

  1. Go to the Manage > Appliances view in the LEM Console and log on to the LEM Manager where you can configure the connector. 

  2. Click the Gear icon next to the LEM Manager, and select Connectors.
  3. In the Connector Configuration window, enter SonicWall in the search box at the top of the Refine Results pane.
  4. Click the Gear icon next to the SonicWall connector, and select New.
  5. Replace the Alias value with a more descriptive connector alias. We recommend using the word firewall in your firewall connector alias. This helps the Firewall filter to function correctly.
  6. Leave the Log File value set to its default value. This is because SonicWall does not allow you to change the logging location of its log files.
  7. Click Save.
  8. Click the Gear icon next to the new connector, and select Start. The Status icon will turn green to indicate the connector has started.
  9. Click Close to exit the Connector Configuration window.

Once the connector starts running, the default Firewall filter will begin displaying alerts from your SonicWall firewall, provided you assigned the appropriate alias in Step 5.

Note: The conditions for the default firewall filter read... Any Alert.ToolAlias = *Firewall*, where the asterisks serve as wildcard characters. If the connector alias defined in Step 5 does not contain the word firewall, the default filter will not work until it has been edited to match the alias you defined.



Last modified