Use the log forwarding profile in each security rule that you want to log traffic for.

If you want the firewall to automatically assign the profile to new security rules and zones, name the profile ‘ default’.

Configure a Log Forwarding Profile for the Threat, Traffic and URL Filtering logs into Objects | Log forwarding.

Create a Syslog Server Profile in Device | Server Profiles | Syslog, specifying the details of the syslog server you installed in Step 1.

There are three basic steps to configuring Palo Alto Firewalls to send syslog messages to your syslog server: There are many syslog servers available, including Fastvue Syslog (our own free, unlimited syslog server for Windows).Ģ.

WebSpy Vantage can then imports the text logs created by your syslog server. You therefore need to install a Syslog Server that collects the syslog messages and writes them to text files.

WebSpy Vantage is not a syslog server and does not directly consume syslog messages for you. Log data is stored off-box and can be archived appropriately.If you use a syslog server that automatically rolls over the logs each day, then it is simple to automate the import of those logs into WebSpy Vantage each day.You do not need to manually download logs each day from the Palo Alto Firewall. They are automatically created on the destination syslog server.It is possible to export CSV log files from your Palo Alto firewall and import them into a WebSpy Vantage Storage, but Syslog is the best option for automated logging and reporting for the following reasons.

Palo alto firewall setup