Page 1 of 1
Bluecoat ProxySG and ProxyAV logs into NLS
Posted: Wed Dec 31, 2014 12:53 am
by itsupport_sgp
Hi,
Has anyone manage to send Bluecoat ProxySG or ProxyAV logs into Nagios Log Server?
If yes, would you mind to share your findings on it?
Thanks a lot.
Re: Bluecoat ProxySG and ProxyAV logs into NLS
Posted: Fri Jan 02, 2015 10:33 am
by scottwilkerson
I haven't done this but did find this on the web on how to setup syslog for them
https://docs.tibco.com/pub/loglogic_log ... Syslog.pdf
It does look like they will only send to port 514, so you would also need to follow the following doc to setup Log Server to listen on port 514
http://assets.nagios.com/downloads/nagi ... Server.pdf
Re: Bluecoat ProxySG and ProxyAV logs into NLS
Posted: Fri Jan 09, 2015 10:30 am
by jacobriversiii
We have done this with good success. What are you looking to correlate?
Re: Bluecoat ProxySG and ProxyAV logs into NLS
Posted: Fri Jan 09, 2015 11:53 am
by eloyd
FYI - we use SSH tunnels as an additional tool to bring non-changeable ports into NLS via port 5544. Don't know if that will help you here or not. You can also use iptables fowrard rules to forward port 514 to 5544 if that works better for you.
Re: Bluecoat ProxySG and ProxyAV logs into NLS
Posted: Fri Jan 09, 2015 2:18 pm
by tmcdonald
@itsupport: Please let us know if anything in this thread helped!
Re: Bluecoat ProxySG and ProxyAV logs into NLS
Posted: Fri Jan 09, 2015 2:54 pm
by sreinhardt
Looks like you've got some good suggestions, let us know how it goes with the implementation.
Re: Bluecoat ProxySG and ProxyAV logs into NLS
Posted: Tue Jan 13, 2015 3:53 am
by itsupport_sgp
Hi,
After checking with the Bluecoat support, ProxySG only send on ports 514.
Hence, we decided to open the port 514 within NLS and it is working fine now.
Thanks for the suggestion!