Help, can't get Sonicwall to send data to Kiwi Syslog 1

[beholder95]

I must be doing something wrong. I got Kiwi Syslog running. It's on UDP 514. I then went to the log tab of my Pro 2040 and put in the IP address of the box running KIWI and set it to port 514.

I'm not getting any data in the Kiwi log. The testlogs work in Kiwi so i think it's something to do with the sonicwall settings.

The Syslog Facility setting is a mystery to me - what should thsi be set to?

Also i did go to categories and turn on all categories for syslog.

Please help.

Thanks,
Andy

 

[SonicWALLInstructor]

Andy I need some more info on your setup:

1. What interface is the Kiwi Syslog Server is Behind?
2. Is the Kiwi Actually listening on 514? (run the telnet (kiwi ip) 514 to check port connectivity)
3. Is there any authenication that is needed on the Syslog service?

Thanks reply promptly.


Roger White CISSP, CISA, CISM, GSEC
Certified SonicWALL Instructor
Certified Security Architect and Auditor
Network Security Team
Invenio Technology
(212)244-4994 ext. 715
(917)326-0386

http://www.inveniotechnology.com