This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

enterprise console 5.1 - view firewall logs remotely?

I am running Sophos Enterprise Console 5.1 to manage about 400 endpoint systems that have the client firewall installed.

What is the best way to remotely troubleshoot firewall rule issues on the client? If I am sitting at the system, I can easily look at the local Sophos console and pull up the Firewall Event Viewer, but what are my options when I'm sitting remotely? Is there a log file I can pull and view? Or attach remotely via the Enterprise Console?

I ask this largely because the point of a client firewall is to provide just enough protection to stop unwanted traffic, but allow just enough to enable users to do their defined jobs. Finding and maintaining this sweet spot requires significant trial and error and troubleshooting.

This thread was automatically locked due to age.

Parents

0 QC over 13 years ago

Hello Neon,
I suggest you start from http://www.sophos.com/en-us/support/knowledgebase/57757.aspx.
When managing SCF from the console it's assumed that all clients (in a particular group) have identical requirements. SEC's View -> Firewall events ... is probably what you are looking for. As noted in a recent thread it won't give you the computer where the alert originated, but this is not needed to configure a general policy.
Christian
:29595
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 QC over 13 years ago

Hello Neon,
I suggest you start from http://www.sophos.com/en-us/support/knowledgebase/57757.aspx.
When managing SCF from the console it's assumed that all clients (in a particular group) have identical requirements. SEC's View -> Firewall events ... is probably what you are looking for. As noted in a recent thread it won't give you the computer where the alert originated, but this is not needed to configure a general policy.
Christian
:29595
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data