-
Products
-
SonicPlatform
SonicPlatform is the cybersecurity platform purpose-built for MSPs, making managing complex security environments among multiple tenants easy and streamlined.
Discover More
-
-
Solutions
-
Federal
Protect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn MoreFederalProtect Federal Agencies and Networks with scalable, purpose-built cybersecurity solutions
Learn More - Industries
- Use Cases
-
-
Partners
-
Partner Portal
Access to deal registration, MDF, sales and marketing tools, training and more
Learn MorePartner PortalAccess to deal registration, MDF, sales and marketing tools, training and more
Learn More - SonicWall Partners
- Partner Resources
-
-
Support
-
Support Portal
Find answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn MoreSupport PortalFind answers to your questions by searching across our knowledge base, community, technical documentation and video tutorials
Learn More - Support
- Resources
- Capture Labs
-
- Company
- Contact Us
NSM - Firewall System Events and Filters
09/11/2024 
1 People found this article helpful
35,303 Views
Description
Sometimes investigators want to search for some certain system events that happened on firewall. This can be done in NSM.
In NSM, go to Inventories and click the firewall in question, click on Monitor/System Events/All Logs/, the system events for this firewall are displayed:
Adjust the time frame (slider or custom) to the desired period of time. You can search keywords like 'link' or 'interface' directly in the 'Search' box, or click on the 'Filter' button, then enter the criteria, example Destination IP like this:
The results can be exported to CSV format file. You can also click 'Sync Event Config' to request NSM collect latest system events from firewall.
Authentication logs like admin login, user login, failed login can be searched the same way.
YES
NO