topic Re: How to connect the Paloalto syslog with rsyslog? in General Topics

How to connect the Paloalto syslog with rsyslog?

baron1234 — Fri, 20 Oct 2017 12:14:03 GMT

Hello good morning,

someone could help me please.
I'd like to know how I can connect a paloalto firewall syslog to the rsyslog application.

regards

Re: How to connect the Paloalto syslog with rsyslog?

Mick_Ball — Fri, 20 Oct 2017 12:44:50 GMT

Device\Server Profiles\Syslog

Re: How to connect the Paloalto syslog with rsyslog?

mgarg — Sat, 21 Oct 2017 04:03:53 GMT

Go to Device > server profiles > syslog. Once the profile is created, head over to the objects > Log forwarding.

Here you will need to create a profile and mention syslog server profile that you created initially.

Once the log forwarding profile is created, you need to apply this to security policies under the Action tab, for the firewall to actually forward logs to your syslog server.