Leave the general logging parameters at their default settings for the initial setup. The logging settings will be made during the protection phase of firewall configuration.
Firewall events can be written to a log that is saved temporarily on the firewall. In addition, firewall events can be saved to a remote server as historical data. If firewall events are saved to a remote server, you must know the server's IP address. The logging information is saved in a standard reporting format and can be sent to a remote syslog server. A syslog server application must be installed on the server or workstation to accept the logging information. Any internal workstation can act as the syslog server. There are many types of syslog server software available, from no cost, open source versions to more costly private versions. If your IT department does not have a syslog server preference, we suggest that you install a simple syslog server and use it to collect and archive firewall logs for security analysis.
Users are responsible for acquiring the syslog daemon and must install and run the syslog daemon per the manufacturer's instructions.
Emerson provides no support or warranty for any syslog daemon. The KIWI Syslog Server has been tested to work with the DeltaV system and the Emerson Smart Firewall. The free KIWI Syslog Server for Windows is available at http://www.kiwisyslog.com/.
Consult with your IT department and obtain the following information required to configure a remote syslog server. We recommend that you record this information on the Worksheet for Smart Firewall configuration.