NeQter Labs How to Guides
SonicWall
Step 1: NeQter Input Setup
1. Log in to NeQter and go to the NeQter Settings → Inputs.
2. Click Add input on the top right corner and fill in the following information:
- Name: Any descriptive name (e.g., SonicWall-FW).
- IP Address: IP of your SonicWall firewall.
- Manufacturer: Select SonicWall.
3. Click Save.
Step 2: NeQter Dashboard Setup
1. Go to NeQter Settings → Dashboards.
2. Expand the SonicWall section.
3. Toggle SonicWall to Enabled.
4. Click Apply changes.
Step 3: SonicWall Configuration
1. Logon to the SonicWall Device.
2. Go to Device in the top navigation bar.
3. Navigate to Log → Syslog on the side navigation bar.
4. Open the Syslog Servers tab.
5. Click Add, then configure the following:
- Name or IP Address: Select the NeQter Object. If none exist, create one for the NeQter Device.
- Port: 514
- Server Type: Syslog Server
- Syslog Format: Leave as Default for all logs, or change to Enhanced if for more customization of logs sent to NeQter.
- Leave the remaining settings as default.
6. Click Ok to save syslog server profile.
7. If Enhanced was selected in step 5, navigate to Syslog Settings tab and click Configure next to Enhanced Syslog Fields Settings. From there, select which fields should be sent to the NeQter device.
If configured correctly, traffic should be visible in NeQter within an hour. If no new traffic appears after completing the steps above, contact support here for further assistance.