SonicWALL firewall appliances support the sending of syslog messages a remote syslog daemon. Up to two servers can be configured.
To configure, use a web browser to connect to the SonicWALL management interface, then login with your user name and password.
From the left hand side menu, click the Log button.
A tabbed window will appear in the main display.
Click the Log Settings tab.
Under the Sending the Log heading, enter the IP address of the machine running the Kiwi Syslog Daemon into the field named: Syslog Server 1. If you are listening on a port other than 514, enter the value in the field named: Syslog server port 1.
Under the Automation heading, set the Syslog Format to Webtrends.
Under the Categories heading, Log subheading, check all the types of events that you would like to receive syslog messages for.
Press the update button.
A reboot of the SonicWALL may be required for the new settings to take effect.
We recommend RnRSoft ReportGen for SonicWALL to produce reports on the SonicWALL syslog messages. A trial version can be downloaded from www.reportgen.com