Juniper SRX Firewall
Juniper SRX Firewall Integration
This integration ingests the following logs:
Session Logs: Track network traffic and session activities, including initiated and denied sessions, application-related traffic, and dropped packets.
Security Logs: Monitor security events such as malware detections, intrusion attempts, DoS attacks, and content filtering activities.
Authentication Logs: Capture authentication activities, including successful and failed login attempts
Steps to configure Log Forwarding
Log in to the Juniper SRX Firewall CLI.
Enter configuration mode:
configure
To send logs to the Log Collector, execute the following commands:
set system syslog host any anyset system syslog host port set system syslog host structured-data brief
Note:
Replace with the Log Collector’s IP address.
Replace with the port shared by BluSapphire.
Verify if Security Logging is enabled:
show security log mode
If enabled, the output will display either mode stream; or mode event-stream;
If Security Logging is enabled, configure log streaming:
set security log stream format sd-syslogset security log stream category allset security log stream host set security log stream host port set security log transport protocol udp
Apply and exit the configuration:
commitexit
Last updated