Question about GMS9?

User_Zero

If you're running GMS 9 with appflow based reporting, is it possible to also send syslog data to the collector?

Flow reporting makes really pretty charts, but seems useless from a security perspective - we no longer receive logs of security events; like who authenticated via sslvpn, or when they logged out, or what was blocked by security services like IPS or GAV. The very events that SonicWALL asks for (for example), when you're trying to submit a case for a false positive GAV detection.

TIA,

Chris

Halon5

@User_Zero , agree

TKWITS

https://www.sonicwall.com/support/knowledge-base/how-to-forward-syslog-to-another-server/170502849816506/

Not sure if the above is what you are referring to, or simply sending syslogs to the GMS server...