Configuring CyberGuard

Firewall Analyzer supports CyberGuard Firewall v4.1, 4.2, 4.3, 5.1

Configuring CyberGuard

On the Cyberguard Firewall Configuration console do the following.

1. Click Configuration and select Alerts and Activities.
2. Select Activity Reports in WebTrends format to send it via syslog.
3. Select facility and severity.
4. Type the Firewall Analyzer IP to which CyberGuard should write the syslog information.

You can select WebTrends log format for Audit logs too. Either you can send the syslogs to the default listener ports (514 or 1514) of Firewall Analyzer or you can import the text log file into Firewall Analyzer.

In case, if Firewall Analyzer shows "Unknown Packet Received", send the sample logs present under <Firewall Analyzer Home>/server/archive/<firewallip> directory, to fwanalyzer-support@manageengine.com for us to troubleshoot.