[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now

x
?
Solved

how do i Secure syslog with TLS

Posted on 2012-04-10
6
Medium Priority
?
1,063 Views
Last Modified: 2012-04-19
Hello Experts,

I am using Linux RHEL 5.7 server, I want to secure syslog with TLS, Please guide me through the steps.
0
Comment
Question by:sudhirgoogle
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 51

Expert Comment

by:ahoffmann
ID: 37831617
can you please explain what you want to archive: a) sending syslog data from host A to host B or b) reading syslog file with your browser?
0
 
LVL 33

Accepted Solution

by:
Dave Howe earned 750 total points
ID: 37832295
You don't - seriously, TLS is a TCP based protocol, and *normally* syslog is UDP - therefore, if you want to protect the data in transit, you would need to wrap the traffic in some sort of tunnel (probably vpn, as most tunnels are also TCP only)

There is an RFC regarding how this *could* be done - rfc5425 - but at this time, almost nobody supports this new format so getting it to work in practice would be a nightmare. In addition, rfc6012 details how the new and experimental DTLS (rfc4347 - TLS for UDP, basically) could be used for a syslog transport, but this is (as far as I know) not implemented by *anyone* in the real world.

In short, trying to do TLS for syslog opens a can of worms, and probably not one you want opening. most sites avoid the issue entirely by having a dedicated management VLAN which also carries syslog traffic.
0
 
LVL 29

Assisted Solution

by:Michael Worsham
Michael Worsham earned 750 total points
ID: 37832377
Here's the how-to:

https://www.icts.uiowa.edu/confluence/display/ICTSit/Add+TLS+Functionality+to+your+syslog-ng+setup

Just remember that you have to enable TCP mode to use Syslog-NG with TLS.
0
Looking for the Wi-Fi vendor that's right for you?

We know how difficult it can be to evaluate Wi-Fi vendors, so we created this helpful Wi-Fi Buyer's Guide to help you find the Wi-Fi vendor that's right for your business! Download the guide and get started on our checklist today!

 
LVL 33

Expert Comment

by:Dave Howe
ID: 37832456
mwecomputers: yup, syslog-ng supports it, but how do you plan to get anything to send TLS wrapped syslog packets to it?
0
 
LVL 1

Author Comment

by:sudhirgoogle
ID: 37854206
i want to achieve sending syslog data from host A to host B
0
 
LVL 1

Author Closing Comment

by:sudhirgoogle
ID: 37864864
Thanks.
0

Featured Post

Enroll in October's Free Course of the Month

Do you work with and analyze data? Enroll in October's Course of the Month for 7+ hours of SQL training, allowing you to quickly and efficiently store or retrieve data. It's free for Premium Members, Team Accounts, and Qualified Experts!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I have seen several blogs and forum entries elsewhere state that because NTFS volumes do not support linux ownership or permissions, they cannot be used for anonymous ftp upload through the vsftpd program.   IT can be done and here's how to get i…
In part one, we reviewed the prerequisites required for installing SQL Server vNext. In this part we will explore how to install Microsoft's SQL Server on Ubuntu 16.04.
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.
Suggested Courses
Course of the Month12 days, 23 hours left to enroll

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question