Encrypted Syslog Forwarding

Forum|Forum|7 years ago
July 2, 2019
2 replies
4353 views

Hi,

we're trying to forward logs from a Fortianalyzer system to a linux server. Is it possible to do so in a secure manner? We'd like to send the logs over an encrypted connection and possibly authenticate both linux server and Fortianalyzer.

Our firmware version is v5.6.8.

Cheers,

Bademeister

brazz_FTNT

Staff

Hey Bademeister,

FAZ can forward logs to 3 types of Forwarding Server:

[ul]

Another FAZ

Syslog

CommonEventFormat(CEF)[/ul]

Perhaps you can try using the Syslog option.

regarding the encryption, if "Reliable Connection" is enabled this force FAZ to send the logs encrypted and use TCP method.

let me know how it goes.

Thanks

emnoc

New Member

Short answer no. If you want to setup a ipsec-tunnel you could send the logs and have encryption.

Sign up

Login with SSO

Login to the community

Login with SSO