ScreenOS Firewalls (NOT SRX)
Highlighted
ScreenOS Firewalls (NOT SRX)

SysLog Error

07.27.09   |  
‎07-27-2009 10:11 PM

I have enabled the syslog on the firewall SSG320 MH but when i am giving the Hostname of the syslog server with port 517 the firewall is giving and error "Syslog cannot connect to the TCP server RAJ; the connection is closed."

 

Error : Syslog cannot connect to the TCP server 192.168.5.111; the connection is closed. " with IP

 

Kindly Help

 

I am trying to configure the firewall analyser which requires syslog 

2 REPLIES
ScreenOS Firewalls (NOT SRX)
Solution
Accepted by topic author RAJISMT
‎08-26-2015 01:27 AM

Re: SysLog Error

07.28.09   |  
‎07-28-2009 11:22 AM

1. Does the server accept TCP connections for syslog? Most setups I have seen used only UDP.

 

Use below command to verify in the server

~:20> netstat -an | grep "514" | grep LISTEN
      *.514                *.*                0      0 49152      0 LISTEN
      *.514                *.*                0      0 49152      0 LISTEN
      *.514                             *.*                             0      0 49152      0 LISTEN 

 

 2. Check routing between firewall and SYSLOG server

 Use ping/traceroute from the firewall

 

Hope that helps,

Cesar

 

 

ScreenOS Firewalls (NOT SRX)

Re: SysLog Error

07.28.09   |  
‎07-28-2009 08:33 PM

The Server does not accept TCP Connection but works fine with UDP

 

The problem is resolved

 

Thanks

Raj