Netgear Firewall

Release Details

Package Details

The application consist of the following components:

1. Normalization Package
   
   • LP_Netgear Firewall 
2. Label Package
   
   • LP_Netgear Firewall 

Enhancement

A minor update has been done in the application’s normalizer for better signature handling.

General Description

The Netgear Firewall application normalizes Netgear Firewall events and enables you to analyze Netgear Firewall data. You can further customize the searches to perform in-depth analysis.

Installation 

Follow these steps to install the Netgear Firewall v5.0.0 plugin:

1. Download the Netgear Firewall package from the Download section above.
2. Add the required Netgear Firewall as a device in LogPoint.
3. Create a collection policy with the Syslog collector and appropriate processing policy. 
4. Assign the policy to the device.

Supported Version

The supported version of Netgear Firewall with LogPoint in this configuration is:

• Netgear Firewall (FWG114P)

Log Format

Expected Log Format

Netgear Firewall

Log Sample

[Sun, 2004-03-28 13:52:46] - TCP packet - Source:1.1.1.3,60001 ,WAN - Destination:1.1.1.4,4467 ,LAN [Drop] - [TCP preconnect traffic dropped]

To export data to LogPoint use Syslog collector on port 514 on the LogPoint server.

Support

If you have any queries or require assistance, please feel free to contact our support team:

Email:             servicedesk@logpoint.com

Phone:           +45 7060 6100

Best regards,