WatchGuard Firewall (NetIQ Format)
Cyfin Reporter is designed to work with WatchGuard Firebox models. It integrates easily into your current system configuration. Scroll down or click on these links for details.
Cyfin Reporter is installed on a server, not on the WatchGuard appliance
Logfile Setup
Logfile Type: Watchguard Firebox (NetIQ Format)
Default Directory: (drive):\My Documents\My WatchGuard\Shared WatchGuard\reports
Configuration Notes
Depending on your Firebox version, you may need to “export” the Watchguard proprietary database logfiles (.wgl) into a text logfile using the NetIQ output type. Here's how:
- Run the "Historical Reports" option in the Watchguard System Manager console (Historical Reports).
- Highlight desired report, click Edit, and on the Setup tab choose the "NetIQ" Output Type. Click OK to save changes.
- In Report Properties, on the Sections tab, select both checkboxes in the lower left (Authentication Resolution on IP addresses, and DNS Resolution on IP addresses).
- Still in Report Properties, on the Time Filters tab, examine the Time Stamps bullets to make sure GMT (Coordinated Universal Time) is selected.
NOTE: NetIQ measures data by calculating the number of URL requests. WatchGuard HTTP proxy logging must be turned on to supply the logging information required for reports.
After report output type is changed to NetIQ
The report appears as a .txt file in the following path: (drive):\Watchguard Logs\reports\webtrends. The files in the webtrends folder are what Cyfin needs - ignore the other reports in the "reports" directory.
NOTE: Our product also supports the Syslog ' WELF' format. View more information about storing Syslog data.
Use the links below for more information on our products and services.