Urgent!!!!Firewall integration with Wazuh

[Tejo Sai]

Hello,

Urgent !!!! 

Can anyone help me to integrate sonciwall firewall on wazuh?

[Bony V John]

Hi,

For integrating a SonicWall network device with Wazuh, you can use the Syslog forwarding method. You can directly forward logs from your SonicWall device to the Wazuh manager on port 514. You can also refer to the following links to configure the SonicWall device to forward logs via Syslog:

Ensure that port 514 is open on the Wazuh manager server and that the SonicWall device has access to the Wazuh manager on this port. If the logs are successfully forwarded to the Wazuh manager, follow the Wazuh Syslog configuration documentation: -  to properly configure the Wazuh manager.

After completing the configuration, run the following command on the Wazuh manager server to check if logs are being received successfully:

tcpdump -i any dst port 514 and src host <sonicwall-ip> 

Replace <sonicwall-ip> with your SonicWall device's IP address.