Logs for Dell SonicWall

[thejackal85]

Hey all! I apologize if this is in the wrong section, but this is the closest one I can find.

Question for you firewall experts out there. I am relatively new to the SonicWall, I come from a Cisco ASA background. My question is I am wanting to see the settings for the logs it keeps; mainly how many days/how many logs it keeps. We got audited the other day and they want logs to be able to go back 60-90 days if possible. How would I be able to check that in a Sonicwall NSA model?

 

[jsmithepa]

You can configure Sonic to email you the log when it's full, or send it to syslog server, for as long as you want.

 

[thejackal85]

But can you change the number of days it keeps the logs? I'm sorry, but that doesn't answer my question.

 

[jsmithepa]

Ah you are one of those who need precise wordings!

This is how it works, the Sonic keeps its log in its internal buffer, is not big, on my box it fills up every couple of days but in a business environment, probably sooner. When it fills up its internal memory, unless it can dump that information outside, it will start to override it. That DUMPING action is to email you the buffer's content, or send the information to a syslog server.

Go to the box's log configuration screen, it won't bite, promise!