Applies To: Zyxel Firewall USG 60(W), USG 110 & USG 310
Zyxel firewalls are next-generation firewalls designed to deliver high availability, anti-malware protection, and consolidated policy enforcement for medium to large-sized businesses and campuses.
Zyxel firewall when configured sends events to EventTracker using syslog. Zyxel Firewall sends events like antivirus scan, intrusion detection and prevention, anti-spam, anti-virus, content filtering, unified security policy, IPsec VPN, SSL VPN, and WLAN management. Generates reports on antivirus spam detail, intrusion activities, configuration changes, interface statistics, traffic denied, etc. It contains username, client IP address, status, message, action, file path, file name, and hash. Graphically displays interface statistics, traffic denied by reason, traffic denied by IP address, threat detected by file name, device name, device IP, etc.
After the Zyxel firewall is configured to deliver events to EventTracker, alerts, dashboards, and reports can be configured into EventTracker.
Reports
The configuration details are consistent with EventTracker version 9.2 and later, and Zyxel firewall USG 60(W), USG 110 & 310.
To configure Zyxel firewall to send logs to EventTracker, refer to the How-to Guide.
For more information please refer to the Integration guide