Trying to View old logs from WatchGuard Firebox 1000

Posted on 2009-02-17
Last Modified: 2013-11-16
Good Day all,

I am trying to view logs from earlier in the morning, but the logs only go within the last hour or two.  Is there anyway on this box to view logs from earlier in the day?
Question by:nyrguy45
    LVL 32

    Expert Comment

    You have option to open Logs once you are connected to log server.

    Which version of watchguard software are you running.

    Please advice.

    Thank you.

    Author Comment

    Sorry it took so long to respond back.....I have been out of touch.

    We have a Watchguard Firebox 1000 software version 7.21 B1596

    Thanks Folks
    LVL 32

    Accepted Solution

    To view old logs in WG logging must be configured; easiest way to check if that is the case, in traffic monitor check the date/time of the logs if they are correct then you do have logging configured; if not; then sorry but we have lost old logs but we can configure log server for furture reference.

    Next once you decide you wish to keep logs; you must decide on an internal machine on which the logs would be dumped. It would be preferable to have a server with some storage space.
    You might use the same machine where the Watchguard management software is installed or you might use some other machine.
    On the designated log server, install the WG software and make sure to select log option; then you would have or already might have a service running on the management software by name Watchguard Security Event Processor [WSEP - little red box on system tray]; if yes then edit the service and here you can configure the log encryption key.
    Please remember this key, we would go in Policy Manager->Setup->logging; Add; under IP address specify the IP address of log server, and in the log encryption key put the same key.

    Save to firebox; your firebox time would now sync with your log server; also you would be able to view the log files.

    Thank you.

    Author Closing Comment

    Thanks for you help that worked out great

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    PRTG Network Monitor: Intuitive Network Monitoring

    Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

    Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
    To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now