> For the complete documentation index, see [llms.txt](https://docs.blusapphire.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.blusapphire.io/log-forwarding/03_log-forwarding-guide/log-forward/juniper/juniper-srx-firewall.md).

# Juniper SRX Firewall

Juniper SRX Firewall Integration

This integration ingests the following logs:

* **Session Logs**: Track network traffic and session activities, including initiated and denied sessions, application-related traffic, and dropped packets.
* **Security Logs**: Monitor security events such as malware detections, intrusion attempts, DoS attacks, and content filtering activities.
* **Authentication Logs**: Capture authentication activities, including successful and failed login attempts

### **Steps to configure Log Forwarding**

1. Log in to the Juniper SRX Firewall CLI.
2. Enter configuration mode:

configure

1. To send logs to the Log Collector, execute the following commands:

set system syslog host any anyset system syslog host port set system syslog host structured-data brief

### **Note:**

* Replace with the Log Collector’s IP address.
* Replace with the port shared by BluSapphire.
* Verify if Security Logging is enabled:

show security log mode

* If enabled, the output will display either mode stream; or mode event-stream;
* If Security Logging is enabled, configure log streaming:

set security log stream format sd-syslogset security log stream category allset security log stream host set security log stream host port set security log transport protocol udp

* Apply and exit the configuration:

commitexit