[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Sonicwall Analyzer Error Syslog Servers may not have been applied on the

Posted on 2013-10-30
5
Medium Priority
?
6,019 Views
Last Modified: 2013-12-02
We have a Sonicwall TZ215 running new 5.9 firmware.  We have installed that analyzer software and the analyzer sees the sonicwall.  If we open up analyzer we get the following error:  "Syslog Servers may not have been applied on the appliance"
error.PNG
status.PNG
0
Comment
Question by:technolutions
  • 3
  • 2
5 Comments
 
LVL 27

Expert Comment

by:Blue Street Tech
ID: 39610963
Hi technolutions,

Make sure the Analyzer's server is using a static IP address. It is also recommended to switch off any firewall or antivirus for the installation as they may cause problem.

When you choose the IP address on which Analyzer would be listening...it has to be one of your Analyzer’s server IP address. Do not enter the IP address of your SonicWALL UTM product here.

Can you ping the syslog server from the firewall?

Did you add the SonicWALL Analyzer IP address in the SonicWALL security appliances?

SonicWALL Analyzer collects the data using the Syslog port 514,

To add SonicWALL Analyzer IP (syslog servers) to the SonicWALL security appliance, follow these steps:
Step 1: Login to the SonicWALL Management Interface
Step 2: Navigate to Log > Syslog and click Add.
The Add Syslog Server window is displayed.
Step 3: Type the Syslog server name or IP address in the Name or IP Address field. Messages from the SonicWALL security appliance are then sent to the servers.
Step 4: If your syslog is not using the default port of 514, type the port number in the Port Number field.
Step 5: Click OK.
Step 6: Click Accept to save all Syslog Server settings.

Let me know how it goes!
0
 

Author Comment

by:technolutions
ID: 39610989
Make sure the Analyzer's server is using a static IP address.  YES

It is also recommended to switch off any firewall or antivirus for the installation as they may cause problem.  DONE

When you choose the IP address on which Analyzer would be listening...it has to be one of your Analyzer’s server IP address. Do not enter the IP address of your SonicWALL UTM product here.  DONE

Can you ping the syslog server from the firewall? YES

Did you add the SonicWALL Analyzer IP address in the SonicWALL security appliances? YES

SonicWALL Analyzer collects the data using the Syslog port 514,

To add SonicWALL Analyzer IP (syslog servers) to the SonicWALL security appliance, follow these steps:
Step 1: Login to the SonicWALL Management Interface
Step 2: Navigate to Log > Syslog and click Add.
The Add Syslog Server window is displayed.
Step 3: Type the Syslog server name or IP address in the Name or IP Address field. Messages from the SonicWALL security appliance are then sent to the servers.
Step 4: If your syslog is not using the default port of 514, type the port number in the Port Number field.
Step 5: Click OK.
Step 6: Click Accept to save all Syslog Server settings.

DONE
Ping.PNG
syslogserver.PNG
analyzer.PNG
0
 

Accepted Solution

by:
technolutions earned 0 total points
ID: 39629438
After opening port 21007 on the firewall the syslog issue stopped.
0
 
LVL 27

Expert Comment

by:Blue Street Tech
ID: 39629540
That's bizarre...port 21007 is completely random...it mentions nothing about it in the setup or admin guides!

Glad it works for you!
0
 

Author Closing Comment

by:technolutions
ID: 39638328
I figured it out.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this tutorial I will show you with short command examples how to obtain a packet footprint of all traffic flowing thru your Juniper device running ScreenOS. I do not know the exact firmware requirement, but I think the fprofile command is availab…
I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
Are you ready to place your question in front of subject-matter experts for more timely responses? With the release of Priority Question, Premium Members, Team Accounts and Qualified Experts can now identify the emergent level of their issue, signal…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
Suggested Courses
Course of the Month19 days, 13 hours left to enroll

872 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question