cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
284
Views
0
Helpful
2
Replies

how to log login attempts on failover firewall

mjsully
Level 1
Level 1

We have a pair of firewalls set to log to a syslog server. The primary is the only one that actually is logging to the syslog server. I know that by enabling "logging standby" it will cause the standby firewall to log, but it also causes double syslogs as the secondary ends up sending the same stuff as the primary. this is not an alternative. All we want is to capture any login attempts to the primary. someone could be hacking at it and we'd never know because the syslogs don't send any info on it. Anyone have a way around this?

2 Replies 2

smalkeric
Level 6
Level 6

Syslog does send login attempts in logs to the syslog server. Make sure that syslog is set to logging level informational.

yes, it sends from the active firewall, but it does not any attempts to the failover. I've tested this and am trying to find a way to make it work.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: