How to Collect Debug CSE Logs on a SonicWall Firewall.

Description

When a customer reports CSE connectivity issues such as resources behind the firewall being unreachable, CSE Connector status is not Reporting. The SonicWall Support team may require several types of logs. Providing complete and accurate information helps us perform a faster and more effective analysis.

Please include the following relevant information:

  • CSE serial number
  • Organization name
  • Affected user(s)
  • Approximate time when the issue occurred
  • Destination details etc

Resolution

Required Logs and Data

1. Enable ''Debug CSE Connector'' on the Firewall (Diag Page)

2. Packet Capture

Packet captures are essential when:

  • Internal resources cannot be reached
  • You need to verify whether Banyan traffic is passing through the firewall

Most Banyan traffic uses the 100.0.0.0/8 range, so filtering by destination IP  and/or subnet is recommended.

3. Firewall TSR, EXP, and CSV Event Logs

Collect the following system files:

  • TSR (Tech Support Report)
    Device | Diagnostics | Tech Support Report | Download Tech Support Report
  • EXP (Exported settings)
    Device | Settings | Firmware and Settings | Export Configuration
  • CSV event logs
    Enable debug logging level and export CSV file
    Monitor | Logs | System Logs | Export

4. Debug Banyan Logs

Enable Debug Logging.
Open Banyan App - Go to Setting | Preferences | Enable Debug Logging

Run a Health Check Diagnostic. 

Navigate to Settings  | Health Check  | Run Diagnostic Tool.

Download Log Files. 

Click ''View Log Files'' at the bottom of the Health Check panel.

 

Do not forget to include a ZIP file with:

  • Sonicwall firewall logs (TSR, EXP, PCAP, debug CSV)
  • Debug Banyan user logs

Related Articles

  • Gen 6 NSv to Gen 7 NSv Upgrades
    Read More
  • How to Block Google QUIC Protocol on SonicOS 7?
    Read More
  • Add new address object to an existing group - SonicOS API
    Read More
not finding your answers?