Data not being collected on Juniper SSG 550

Question

I followed guide on page 17 (page 49)“Setting a Firewall to Log to a LEM Appliance”, no logs display in the “Log & Event Manager” in below picture, how could I fix it? We are using two Juniper SSG 550 redundancy configuration, Firmware Version:6.1.0r6.0 (Firewall+VPN).

Firewall configuration:

Thanks a lot!

phil3 · Accepted Answer

Hello again.

The main thing you'll want to check here is the settings in the Firewall filter compared to the settings in your firewall connector. The default Firewall filter is based on the logic: Any Alert.ToolAlias = *firewall*, so if the Alias in your connector doesn't contain the word, "firewall," the default Firewall filter won't pick up any alerts from that connector/firewall. See the Note near the bottom of pg. 18.

Hope that helps.

Phil