Configuring the Syslog Service on Sangfor devices

To configure the Syslog service in your Sangfor NGAF devices, follow the steps below:

1. Access the NGAF Web Interface.

   Open a web browser and navigate to the NGAF's management IP address. Login using your administrator credentials.

2. Navigate to System > Logging Options
3. Check all Syslog checkboxes under Log Location for the type of logs to be forwarded.

4. In Syslog Server tab, enter the IP address of EventLog Analyzer server and port (514), which is EventLog Analyzer's syslog listener port, in the respective boxes.
5. Click OK to apply changes.

For NGAF version 6.4 and below:

1. Access the NGAF Web Interface.

   Open a web browser and navigate to the NGAF's management IP address. Login using your administrator credentials.

2. Navigate to System > Logging Options > Syslog
3. Check Enable Syslog checkbox.

4. Enter the IP address of the EventLog Analyzer server and port (514), which is EventLog Analyzer's syslog listener port, in the respective boxes.
5. Click OK to apply changes.

To configure the Syslog service in your Sangfor IAM devices, follow the steps below:

1. Access the IAM Web Interface.

   Open a web browser and navigate to the IAM's management IP address. Login using your administrator credentials

2. Navigate to System > General> Advanced > Syslog Server.

3. Check the Enable Syslog Server checkbox.
4. Enter the IP address of the EventLog Analyzer server and EventLog Analyzer's syslog Listener port in the given box as ipaddress:port example: 10.10.10.1:514
5. Click Commit to apply changes.