M500 Change Log Collection Interface from the Management to the Dedicated Eth 1 and 12

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

M500 Change Log Collection Interface from the Management to the Dedicated Eth 1 and 12

Cyber Elite
Cyber Elite

 

Currently we have 2 M500 running in log collector mode.

 

All the Firewalls are sending logs  to M500 on its Management interface .

Panorama M100 also talk to M500 via its Management interface.

 

Currenly seems our traffic has increased and we are send lot of logs to M500 on its Management Interface.

 

So I need to use Eth1 and Eth2 on each M500 for log collection

 

Need to know if this is possible now without causing major outage?

 

 

MP

Help the community: Like helpful comments and mark solutions.
1 accepted solution

Accepted Solutions

Cyber Elite
Cyber Elite

@MP18,

The modification to the interfaces will disconnect the firewalls momentarily until you get everything updated. However, that won't effect anything vital to traffic flow and won't cause any outage to network traffic. The logs will cache on the firewall and once you have them pointed at the new IP the logs will be transported to the M500 as expected. 

 

View solution in original post

2 REPLIES 2

Cyber Elite
Cyber Elite

@MP18,

The modification to the interfaces will disconnect the firewalls momentarily until you get everything updated. However, that won't effect anything vital to traffic flow and won't cause any outage to network traffic. The logs will cache on the firewall and once you have them pointed at the new IP the logs will be transported to the M500 as expected. 

 

Many Thanks again will do this change as seems send and receive queue on log collector is getting maximized out

MP

Help the community: Like helpful comments and mark solutions.
  • 1 accepted solution
  • 2321 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!