Solved

Sonicwall Analyzer Error Syslog Servers may not have been applied on the

Posted on 2013-10-30
5
5,614 Views
Last Modified: 2013-12-02
We have a Sonicwall TZ215 running new 5.9 firmware.  We have installed that analyzer software and the analyzer sees the sonicwall.  If we open up analyzer we get the following error:  "Syslog Servers may not have been applied on the appliance"
error.PNG
status.PNG
0
Comment
Question by:technolutions
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 25

Expert Comment

by:Diverse IT
ID: 39610963
Hi technolutions,

Make sure the Analyzer's server is using a static IP address. It is also recommended to switch off any firewall or antivirus for the installation as they may cause problem.

When you choose the IP address on which Analyzer would be listening...it has to be one of your Analyzer’s server IP address. Do not enter the IP address of your SonicWALL UTM product here.

Can you ping the syslog server from the firewall?

Did you add the SonicWALL Analyzer IP address in the SonicWALL security appliances?

SonicWALL Analyzer collects the data using the Syslog port 514,

To add SonicWALL Analyzer IP (syslog servers) to the SonicWALL security appliance, follow these steps:
Step 1: Login to the SonicWALL Management Interface
Step 2: Navigate to Log > Syslog and click Add.
The Add Syslog Server window is displayed.
Step 3: Type the Syslog server name or IP address in the Name or IP Address field. Messages from the SonicWALL security appliance are then sent to the servers.
Step 4: If your syslog is not using the default port of 514, type the port number in the Port Number field.
Step 5: Click OK.
Step 6: Click Accept to save all Syslog Server settings.

Let me know how it goes!
0
 

Author Comment

by:technolutions
ID: 39610989
Make sure the Analyzer's server is using a static IP address.  YES

It is also recommended to switch off any firewall or antivirus for the installation as they may cause problem.  DONE

When you choose the IP address on which Analyzer would be listening...it has to be one of your Analyzer’s server IP address. Do not enter the IP address of your SonicWALL UTM product here.  DONE

Can you ping the syslog server from the firewall? YES

Did you add the SonicWALL Analyzer IP address in the SonicWALL security appliances? YES

SonicWALL Analyzer collects the data using the Syslog port 514,

To add SonicWALL Analyzer IP (syslog servers) to the SonicWALL security appliance, follow these steps:
Step 1: Login to the SonicWALL Management Interface
Step 2: Navigate to Log > Syslog and click Add.
The Add Syslog Server window is displayed.
Step 3: Type the Syslog server name or IP address in the Name or IP Address field. Messages from the SonicWALL security appliance are then sent to the servers.
Step 4: If your syslog is not using the default port of 514, type the port number in the Port Number field.
Step 5: Click OK.
Step 6: Click Accept to save all Syslog Server settings.

DONE
Ping.PNG
syslogserver.PNG
analyzer.PNG
0
 

Accepted Solution

by:
technolutions earned 0 total points
ID: 39629438
After opening port 21007 on the firewall the syslog issue stopped.
0
 
LVL 25

Expert Comment

by:Diverse IT
ID: 39629540
That's bizarre...port 21007 is completely random...it mentions nothing about it in the setup or admin guides!

Glad it works for you!
0
 

Author Closing Comment

by:technolutions
ID: 39638328
I figured it out.
0

Featured Post

Enroll in June's Course of the Month

June’s Course of the Month is now available! Experts Exchange’s Premium Members, Team Accounts, and Qualified Experts have access to a complimentary course each month as part of their membership—an extra way to sharpen your skills and increase training.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I recently had the displeasure of buying a new firewall at one of the buildings I play Sys Admin at. I had to get a better firewall than the cheap one that I had there since I was reconnecting the main office to the satellite office via point-to-poi…
We sought a budget ($5,000) firewall solution that would provide all the performance we needed with no single point of failure.  Hosting a SAAS web application in our datacenter, it was critical that we find a way to keep connectivity up and inbound…
This is a high-level webinar that covers the history of enterprise open source database use. It addresses both the advantages companies see in using open source database technologies, as well as the fears and reservations they might have. In this…
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question