Watchguard Firebox X1000 Betriebsanweisung PDF herunterladen (Seite 216)

Chapter 14: Reviewing and Working with Log Files

200 WatchGuard Firebox System

Sending logs to a log host at another location

Because they are encrypted by the Firebox, you can send log files over the

Internet to a log host at another office. You can even send this traffic over

the Internet from the Firebox at one office to the log host behind a second

Firebox at a remote office. One application of this feature might involve

configuring the Firebox at a remote office to store its logs on a log host

behind the Firebox at the main office. To do this, you must configure the

Firebox at the remote office such that it knows where and how to send the

log files. The main office Firebox must be configured to allow the log

messages through the firewall to the log host.

On the main office Firebox:

1 Open Policy Manager with the current configuration file.

2 On the toolbar, click the Add Service icon (shown at

right).

You can also select Edit => Add Service. The Services dialog box

appears.

3 Expand Packet Filters.

4 Select WatchGuard-Logging. Click Add. Click OK.

5 On the Incoming tab, select Enabled and Allowed.

6 Under the To list, click Add.

7 Click NAT. Enter the external IP address of the main office Firebox in

the External IP Address box. Enter the IP address of the log host

behind the main office Firebox in the Internal IP Address box.

8 Click OK to close the Add Static NAT dialog box. Click OK to close

the Add Address dialog box. Click OK to close the WatchGuard-

Logging Properties dialog box.

9 Save the new configuration to the main office Firebox.

On the remote office Firebox:

1 Open Policy Manager with the current configuration file.

2 Select Setup => Logging. Click Add.

3 Enter the external IP address of the main office Firebox and log

encryption key of the log host on the network protected by the main

office Firebox.

4 Click OK to close the Add IP Address dialog box. Click OK again to

close the Logging Setup dialog box.

1 2 ... 211 212 213 214 215 216 217 218 219 220 221 ... 270 271

Keine Kommentare

Watchguard Firebox X1000 Betriebsanweisung Seite 216