Draytek Vigor 3300V Firewall

Release Details

Package Details

The application consist of the following component:

1. Normalization Package
   
   • LP_Draytek Vigor 3300V Firewall 

Enhancement

A minor update has been done in the application’s normalizer for better signature handling.

General Description

The Zertificon Z1 application normalizes Draytek Vigor 3300V Firewall events and enables you to analyze Draytek Vigor 3300V Firewall data. You can further customize the searches to perform in-depth analysis.

Installation 

Follow these steps to install the Draytek Vigor 3300V Firewall v5.0.0 plugin:

1. Download the Draytek Vigor 3300V Firewall package from the Download section above.
2. Create a collection policy with the Syslog collector and appropriate processing policy. 
3. Assign the policy to the device.

Supported Version

The supported version of Draytek Vigor 3300V Firewall with LogPoint in this configuration is:

• Draytek Vigor 3300V Firewall

Log Format

Draytek Vigor Firewall

Log Sample

<174>Nov 25 09:00:00 Vigor3300: LAN_Status:[Tx=74469 Rx=74152 ] WAN_Status:[GW_IP=1.1.1.1 BBandMode=PPPoE BBandIp=1.1.1.1 BBandTxPkt= BBandTxRate=0 BBandRxPkt= BBandRxRate=0 BBandUpTime=0:15:43] Model:[Style=0 ModelName?=Vigor3300 ]

<135> Aug 24 12:21:37 Vigor3300: Blocking Donkey connection, Local user 1.1.1.1

To export data to LogPoint use Syslog collector on port 514 on the LogPoint server.

Support

If you have any queries or require assistance, please feel free to contact our support team:

Email:             servicedesk@logpoint.com

Phone:           +45 7060 6100

Best regards,