best practices for storing and analyze the Firewall logs

xkp68 · January 2021

Hello,

which is the best practices for storing and analyze the Firewall logs?

My impression is that in my ATP500 the internal log is able to store only 1024 records, and even if I have setted up the USB internal storage, all I get is a serie of daily log files that I m unable to

analyze from the Firewall web interface.

So i m considering the option of a syslog server not only to store but to analyze the logs too.

For this reason I wonder if the community can suggest me the most common and used syslog servers for this purpose, both free and commercial.

Any help and suggestions will be greatly appreciated

Thanks in advance

Filippo

Zyxel_Jeff · January 2021

Hi @xkp68

Or you can consider to adopt SecuReporter which provides cloud-based and visualization interface to help you monitor on your devices in more convenient way.

xkp68 · January 2021

Hi Jeff,
thanks for your answer.
Unfortunately it is mandatory for me not to use a cloud-based solution, this is why i m asking for alternative.As a matter of fact the ATP500 is able to manage till 4 remote server for logging so i hope someone here uses this feature.

jasailafan · January 2021

@xkp68
Follow the steps in scenario 5 to send the logs to syslog server.
ftp://ftp2.zyxel.com/UAG4100/application_note/UAG4100_1.pdf

best practices for storing and analyze the Firewall logs

All Replies

Categories

Security Highlight

Security Help Center