Bluecoat ProxySG and ProxyAV logs into NLS

[itsupport_sgp]

Hi,

Has anyone manage to send Bluecoat ProxySG or ProxyAV logs into Nagios Log Server?
If yes, would you mind to share your findings on it?

Thanks a lot.

[scottwilkerson]

I haven't done this but did find this on the web on how to setup syslog for them
https://docs.tibco.com/pub/loglogic_log ... Syslog.pdf

It does look like they will only send to port 514, so you would also need to follow the following doc to setup Log Server to listen on port 514
http://assets.nagios.com/downloads/nagi ... Server.pdf

[jacobriversiii]

We have done this with good success. What are you looking to correlate?

[eloyd]

FYI - we use SSH tunnels as an additional tool to bring non-changeable ports into NLS via port 5544. Don't know if that will help you here or not. You can also use iptables fowrard rules to forward port 514 to 5544 if that works better for you.

[tmcdonald]

@itsupport: Please let us know if anything in this thread helped!

[sreinhardt]

Looks like you've got some good suggestions, let us know how it goes with the implementation.

[itsupport_sgp]

Hi,

After checking with the Bluecoat support, ProxySG only send on ports 514.
Hence, we decided to open the port 514 within NLS and it is working fine now.

Thanks for the suggestion!