Syslog-ng issue

ausafali88 — Sun, 22 Oct 2017 11:52:55 GMT

I have a Kiwi Syslog-ng server reachable from Palo Alto Firewall MGMT interfaces. I generated a Self-signed Cert on PA Firewall and imported that into Windows' store for use in Secure TCP (SSL) communication in kiwi Syslog Server....but the firewall is reppetedly giving error...

Syslog connection failed to server[\'AF_INET.x.x.x.x:6514.\']'

Moreover, there is no option to use that certificate for Secure Syslog...as mentioned in:

https://www.paloaltonetworks.com/documentation/60/pan-os/newfeaturesguide/management-features/support-for-syslog-over-tcp-and-ssl

STEP 2:

Please can anyone help with this?

Re: Syslog-ng issue

hpunjabi — Mon, 23 Oct 2017 13:50:00 GMT

Hi @ausafali88,

While generating the certificate do not tick the option as Certificate Authority then you should get the option of selecting Certificate for Secure syslog.

You can select signed by option from an already generated Internal CA certificate.

topic Syslog-ng issue in General Topics

Syslog-ng issue

Re: Syslog-ng issue