Firewall Logs from EXA cloud firewall

[k-strider]

Hi All, after being in the RPA Teams meeting yesterday about insurance against cyber incidents - something that came out of one of the case studies is that the school couldn't provide firewall logs to the incident specialists as the ISP didn't keep them. Which prompted me to ask as we now have a cloud firewall rather than an on prem box.

And the answer is they don’t keep them but I asked about getting them sent to a syslog server. We don’t have one on site we just have a Zabbix monitoring server which isn’t really for this purpose. Any suggestions ideally free that will run on ubuntu with a web interface either that I can run on my existing Zabbix box or on another Ubuntu box with some good setup instructions as every time I look it looks complex

[NegativeKillDeath]

Greylog Open might fit your bill.

[Edu-IT]

Was there anything else useful in this session? I couldn’t attend unfortunately.