From 4427e0d3be1b40c4d56cb983f54ae215ad116763 Mon Sep 17 00:00:00 2001 From: CharlesLR-sekoia Date: Wed, 28 Aug 2024 18:23:15 +0200 Subject: [PATCH] capitalise customer feedback for sophos config --- docs/integration/categories/network_security/sophos_fw.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/docs/integration/categories/network_security/sophos_fw.md b/docs/integration/categories/network_security/sophos_fw.md index 5c9fe544fa..fc61655b03 100644 --- a/docs/integration/categories/network_security/sophos_fw.md +++ b/docs/integration/categories/network_security/sophos_fw.md @@ -25,8 +25,14 @@ You can configure a syslog server in Sophos Firewall by following the instructio - Enter a name for the syslog server. - Enter the IP Address of the syslog server. Messages from the device will be sent to the entered IP address. - Enter a Port number that the device will use for communicating with the syslog server. Device will send messages using the selected port. -- Select the Facility from the available options. Note: Facility informs the syslog server of the log message's source. It is defined by the syslog protocol. You can configure the facility to distinguish log messages from different devices. This parameter helps you identify the device that recorded a specific log file. +- Select the Facility from the available options, "DEAMON" should work. + +!!! Note + Facility informs the syslog server of the log message's source. It is defined by the syslog protocol. You can configure the facility to distinguish log messages from different devices. This parameter helps you identify the device that recorded a specific log file. + +- Confirm the procotol is UDP. - Select the Severity Level from the available options. +- Deactivate the option "Secure log transmission". - Click Save to save the configuration. ### Forward logs to Sekoia.io