topic Re: log to Kiwi Syslog in General Topics

log to Kiwi Syslog

s_quasar — Sun, 18 Nov 2018 21:05:42 GMT

Hi,

I've configured all the necessary in my PA-500 but I can't view logs Kiwi Syslog v8 in my PC. Is there some special configuration I missed? I've configured the firewall for UDP sessions. I've some DMZ configured, maybe I forgot to open some ports?

Re: log to Kiwi Syslog

RobinClayton — Mon, 19 Nov 2018 15:05:09 GMT

Do you have Kiwi workign for other logs?

Is Kiwi listening on UDP or TCP?

Can you ping the kiwi box from the firewall management address??

Re: log to Kiwi Syslog

s_quasar — Mon, 19 Nov 2018 17:16:43 GMT

Hi,

kiwi is listening in UDP port. I have no other log active. I can ping only the managment interface but not other IPs with the command "ping host x.x.x.x"

Re: log to Kiwi Syslog

s_quasar — Mon, 19 Nov 2018 17:31:02 GMT

Hi,

with the command "ping source <mgmt_address> host x.x.x.x" I have the correct response.

Re: log to Kiwi Syslog

BPry — Mon, 19 Nov 2018 18:35:32 GMT

@s_quasar,

So a few things to think about:

1) Does the firewall see the syslog traffic in the logs (enable logging on the default logs temporarily) and does it actually state it's being allowed.

2) Do you actually have the log-setting setup correctly or the log-forwarding profiles setup correctly.

Re: log to Kiwi Syslog

s_quasar — Tue, 22 Oct 2019 10:55:00 GMT

Hi,

about the logs firewall. Is there a feature to activate to view in monitor these specific activities?

I see nothing in monitor -> logs -> traffic.