Release Details
|
Fields |
Details |
|---|---|
|
Name |
SnapGear Firewall |
|
Version |
5.0.0 |
|
Supported On |
LogPoint v6.0.0 and later |
|
Release Date |
2020-05-14 |
| Document Date |
2020-05-14 |
| Download | |
| SHA256 |
ee94e60b18ec7b3e63fa66f86e211b6bd113f2c556e357957693100019106ea3 |
Package Details
The application consists of the following components:
-
Normalization Package
- LP_SnapGear Firewall
Enhancement
A minor update has been done in the application’s normalizer for better signature handling.
General Description
The SnapGear Firewall application normalizesSnapGear Firewall events and enables you to analyze SnapGear Firewalldata. You can further customize the searches to perform in-depth analysis.
Installation
Follow these steps to install the SnapGear Firewall v5.0.0 application:
- Download the SnapGear Firewall from the Download section above.
- Add the required SnapGear Firewall as a device in LogPoint.
- Create a collection policy with the Syslog collector and appropriate processing policy.
- Assign the policy to the device.
Supported Devices
The supported version of Sitecore with LogPoint in this configuration is:
- SnapGear Firewall
Log Format
Expected log format:
SnapGear Firewall
Log Sample
Jan 31 00:09:02 login[32161]: Authentication attempt failed for root from 192.168.2.1 because: Bad Password
To export data to LogPoint, use Syslog collector on port 514 on the LogPoint server.
Support
If you have any queries or require assistance, please feel free to contact our support team:
Email: servicedesk@logpoint.com
Phone: +45 7060 6100
Best regards,
Comments
Article is closed for comments.