Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INTRUSION DETECTION PREVENTION DEVICES GUIDE REV 01, Manual

Page: 71 / 104

Forwarding Syslog Messages
NSMXpress Series II provides a simple mechanism for configuring syslog messaging
between NSMXpress Series II and a syslog receiver running rsyslog, syslog-NG, or basic
syslog. This mechanism simplifies choosing syslog receivers, data sources of the messages
you want to log, and the message transport used.
For the type of message transport, you can choose among TCP, SSL, and UDP. For rsyslog
or syslog-NG implementations use TCP or SSL. SSL adds security to TCP; if you select
SSL, NSMXpress Series II creates a secure tunnel to the syslog receiver. UDP messaging
is available for basic syslog implementations.
The following sections provide procedures for managing syslog message forwarding:
•
Viewing Syslog Receivers on page 51
•
Adding and Configuring Syslog Receivers on page 52
• Editing Syslog Receiver Configurations on page 54
• Deleting Syslog Receivers on page 54
Viewing Syslog Receivers
To view the syslog receivers configured on your NSMXpress Series II appliance, follow
these steps:
1.
Select System Administration > Syslog Forwarding . The Syslog Forwarding window
appears. Figure 36 on page 53 shows an example.
51 Copyright © 2010, Juniper Networks, Inc.
Chapter 3: Configuring NSM from the Web Interface