About The Device
SonicOS provides a web management interface for configuring, managing, and monitoring the features, policies, security services, connected devices, and threats to your network. SonicOS runs on top of SonicCore, SonicWall's secure underlying operating system.
Device Information
Entity | Particulars |
---|---|
Vendor Name | SonicWall |
Product Name | Next-Generation Firewall (NGFW) |
Type of Device | Hosted |
Collection Method
Log Type | Ingestion label | Preferred Logging Protocol | Log Collection Method |
---|---|---|---|
SonicWall | SONIC_FIREWALL | Syslog | CyberHub |
Port Requirements
Source | Destination | Port |
---|---|---|
SonicWall | CyberHub | 514 (UDP) |
Device Configuration
Log on to the SonicWALL Web interface
On the left side of the screen, click Log
In the menu that is displayed, click Syslog
Syslog ID, Syslog Facility & Syslog format should be default value.
Under Syslog Servers, click Add
In the dialog box that appears, enter the IP address of the remote syslog server and the UDP port number that the collector listens on. The default port is 514
Click OK, and then click Accept
Integration Parameters
Parameters required from customer for Integration.
Property | Default Value | Description |
---|---|---|
IP Address | SonicWall interface IP address | Hostname or IP address of the device which forwards logs to the CyberHub. |