WatchGuard Technologies Firebox X manual Click Save Changes or Close

Page 40

Setting Global Logging and Notification Preferences

Setting the interval for log rollover

You can control when the log files rollover in the Log Files tab in the Log Server configuration interface. You can also manually start a rollover of the current log file by selecting File > Roll current log file from the Status/Configuration window.

1Click the Log Files tab.

2To roll the log file on a time interval, select the Roll Log Files By Time Interval check box. Set the time interval. From the Next Log Roll is Scheduled For drop-down list, select a date when the log file rolls.

3To roll the log file based on the size of the log file, select the Roll Log Files By File Size check box. Type the maximum size for the log file before the file rolls, or use the spin control to set the number.

4Click Save Changes or Close.

The Log Server interface closes and saves your entries. The new configuration starts immediately. The Log Server restarts automatically.

Scheduling log reports

If you have created network activity reports using Historical Reports, you can schedule the Log Server component to automate the reports. You must first create a report in Historical Reports, or it will not appear in the Log Server interface.

1 Click the Reports tab.

34

WatchGuard System Manager

Image 40
Contents WatchGuardSystem Manager User Guide Address Contents Setting Up Logging and Notification Copy the online help system to more computersLogViewer Settings Importing Certificates Microsoft Internet Explorer 5.5Apache Software License, Version 2.0, January Getting Started About WatchGuard System ManagerWatchGuard Management Server Log ServerInstalling WatchGuard System Manager About Hardware and Appliance SoftwareLicense Keys Network addresses1Network IP Addresses Without the Firebox External interfaceTrusted interface Optional interfacesSoftware encryption levels BaseUses 40-bit encryption StrongSetting Up Your Management Server Putting the Firebox into operation on your networkMaster password Admin passwordAfter Your Installation Installation TopicsWFS appliance software configuration modes Routed configurationDrop-in configuration Adding secondary networks to your configuration To add a secondary networks, do one of these proceduresUse the Quick Setup Wizard during installation Dynamic IP support on the external interfaceEntering IP addresses About slash notationInstalling the Firebox cables Installation Topics Service and Support LiveSecurity Service SolutionsThreat responses, alerts, and expert advice Easy software updatesLiveSecurity Service Broadcasts Basic FAQs LiveSecurity Service Self Help ToolsNew from WatchGuard Advanced FAQs Known IssuesInteractive Support Forum Online TrainingUsing the WatchGuard Users Forum WatchGuard Users ForumWatchGuard Users Group Online HelpProduct Documentation Technical SupportCopy the online help system to more computers Software requirementsWeb Site Service Time We try to supply a solution in a maximum time of four hoursType of Service HoursTraining and Certification Monitoring Your Network Starting WatchGuard System ManagerAbout the WatchGuard System Manager Window From the Windows DesktopConnecting to a Firebox Disconnecting from a FireboxDevice LogConnecting to a Server Type the password for the Management ServerDisconnecting from a Server Seeing Information about DevicesCertificates Firebox StatusBranch Office VPN Tunnels Seeing Information on Log Servers Mobile user VPN tunnelsPptp user VPN tunnels No exclamation pointMonitoring VPNs About the WatchGuard Toolbar Starting Security ApplicationsPolicy Manager Firebox ManagerQuick Setup Wizard HostWatchLog Viewer Historical ReportsSetting Up the Log Server Setting Up Logging and NotificationLog Server collects logs from each WatchGuard Firebox WatchGuard Log Server Configuration dialog box appears Configuration Guide for your version of appliance softwareSetting Global Logging and Notification Preferences Type the new log encryption key two times Click OKClick Save Changes or Close Click Save Changes Setting Global Logging and Notification Preferences Traffic Alarm Event Diagnostic Reviewing and Working with Log FilesTypes of Log Messages Traffic log messagesAlarm log messages Diagnostic log messagesLog File Names and Locations Starting LogViewerBrowse to find the log file and click Open LogViewer Settings Changing LogViewer settings with WFS appliance software Click to set the format of the logs to the default colorsUsing LogViewer Select Edit FindPaste the data into any text editor Click File Merge log files Click Browse to find the files to put together Click MergeUsing LogViewer Using LogViewer Generating Reports of Network Activity Creating and Editing ReportsType the report name From Historical Reports, click AddSelect the filter Type the Firebox IP address or host name. Click Add Specifying a Report Time IntervalChange the report definition Specifying Report Sections To consolidate report sections Setting Report PropertiesType the number of items to put in the table Exporting Reports Using Report Filters Complete the Filter tabsWhen finished, click OK Running ReportsReport Sections and Consolidated Sections Change the filter propertiesReport Sections and Consolidated Sections Session Summary Proxied Traffic Consolidated sections Report Sections and Consolidated Sections Public Key Cryptography and Digital Certificates Managing Certificates Certificate AuthorityPKI in a WatchGuard VPN From the menu, select the correct Managing the Certificate AuthorityCertificate Authority CA Certificate Management Server CA Certificate Generate a New CertificateGWvpn gateway name Find and Manage CertificatesRevoke ReinstatePuts back a certificate that was revoked before DestroyManaging the Firebox X Edge Firebox Soho Importing CertificatesNetscape Communicator NetscapeTroubleshooting ideas AdministrationManaging the Firebox X Edge or Soho Device System StatusRemoving Certificates System security and remote managementFirewall LoggingSelect File Soho Management Clean up on PC Removing Certificates Appendix a Copyright and Licensing WatchGuard Firebox Software End-User License AgreementWatchGuard System Manager Copyright and Trademarks Licenses OpenSSL LicenseOriginal SSLeay License Apache Software License, Version 2.0, January Licenses Pcre License GNU Lesser General Public License Licenses Licenses Licenses GNU General Public License Licenses Licenses Licenses Sleepycat License Licenses Appendix B WatchGuard File Locations General File LocationsDefault File Locations Quick Setup WizardHostWatch for Fireware Appliance Software Firebox System Manager for Fireware Appliance SoftwarePolicy Manager for Fireware Appliance Software WatchGuard System Manager Policy Manager for WFS Appliance SoftwareFirebox System Manager for WFS Appliance Software HostWatch for WFS Appliance SoftwareFlash Disk Management for WFS Appliance Software LogViewerWebBlocker Server Management ServerLog Server User Interface Log Server for WFS Appliance Software Log Server for Fireware Appliance SoftwareHistorical Reports Log Merge Management Server Setup WizardManagement Server User Interface WatchGuard Certificate Authority Default File Locations Index Muvpn Wctp 100