SysLog Error

[RAJISMT]

I have enabled the syslog on the firewall SSG320 MH but when i am giving the Hostname of the syslog server with port 517 the firewall is giving and error "Syslog cannot connect to the TCP server RAJ; the connection is closed."

Error : Syslog cannot connect to the TCP server 192.168.5.111; the connection is closed. " with IP

Kindly Help

I am trying to configure the firewall analyser which requires syslog 

[Cesar · Accepted solution]

1. Does the server accept TCP connections for syslog? Most setups I have seen used only UDP.

Use below command to verify in the server

~:20> netstat -an | grep "514" | grep LISTEN
      *.514                *.*                0      0 49152      0 LISTEN
      *.514                *.*                0      0 49152      0 LISTEN
      *.514                             *.*                             0      0 49152      0 LISTEN 

 2. Check routing between firewall and SYSLOG server

 Use ping/traceroute from the firewall

Hope that helps,

Cesar

[RAJISMT]

The Server does not accept TCP Connection but works fine with UDP

The problem is resolved

Thanks

Raj