This section describes how to send logs from Barracuda Next Generation Firewall to the Comm Broker using syslog. This involves configuring the firewall to send syslog messages and enabling the firewall to stream log files to external syslog devices like the Barracuda NG Control Center or a third-party syslog server.
Note
The box wizard can only be used on hardware units. If you are deploying a virtual F-Series Firewall, you must configure the time zone and change the password manually.
Log in to the Barracuda NextGen Firewall F-Series.
Launch NextGen Admin.
In the Log in window, select Firewall.
Enter the Management IP, Username, and Password.
Click Sign In. The Authentication Check window opens.
Click Trust.
Select Config > Full Config > Box > Infrastructure Services to open the Syslog Streaming page.
Click Lock/Unlock.
Enable the Syslog service.
Enter the destination IP address (for the Trellix Comm Broker Sender) and port to which syslog should be sent.
Click Send Changes.
Click Activate.