Police Cyber Alarm Secure Sensor & Smoothwall Syslog

[mikkydoos]

Hi all,

 

I'm setting up Secure Sensor in Police Cyber Alarm to monitor firewall events.

 

Trying to configure the syslog forwarding from Smoothwall. I've got this far...

 

 

 

 

Does anyone know how to do this in Smoothwall ? 

 

Only syslog setting I can find are here....

 

 

 

 

 

Cheers in advance     

 

 

 

[tdk1069]

Been a while since I used smoothwall (still miss some features)

 

I was about to say "Should just be remote firewall syslog" but I googled it to see if you needed to specify the Port number and found this 

 

https://kb.smoothwall.com/hc/en-us/articles/4871293963164-Send-Smoothwall-Firewall-logs-to-Police-CyberAlarm

 

Looks like no port required (514 is default)

 

We use greylog to collect all our logs here 

[mikkydoos]

@tdk1069

 

Nice find, that worked.  Thanks so much.  It's calling home.

 

Confused me as there's no destination IP. This is handled by the Secure Sensor client.

 

 

Cheers again 👍👍👍

[Hjogyat]

Hi,

Anyone tried setting this up with LGfL's firewall? I have asked them, they said they have done it but the sensor isn't sending or receiving data, but nothing is blocked.

 

Thanks

[flipthebit]

1 hour ago, Hjogyat said:

Hi,

Anyone tried setting this up with LGfL's firewall? I have asked them, they said they have done it but the sensor isn't sending or receiving data, but nothing is blocked.

 

Thanks

It's working for me. Nothing more than following their instructions and passing those onto LGfL to set up their end.

[PaddyNewman]

3 hours ago, Hjogyat said:

Hi,

Anyone tried setting this up with LGfL's firewall? I have asked them, they said they have done it but the sensor isn't sending or receiving data, but nothing is blocked.

 

Thanks

 

Let me know your school and I will check your settings

[Hjogyat]

26 minutes ago, PaddyNewman said:

 

Let me know your school and I will check your settings

PM'd you

[PaddyNewman]

41 minutes ago, Hjogyat said:

PM'd you

All done