A UserGate sensor connects a single UserGate security gateway device to a LogAn server. To connect a UserGate sensor, follow these steps:
|
Task |
Description |
|---|---|
|
Step 1. On the UserGate server, enable the Log Analyzer and SNMP services on the required zone. |
On the UserGate server that you want to add as a sensor, go to the Network --> Zones section, select the zone containing the network interfaces through which network communication with the LogAn server will occur, and allow the Log Analyzer and SNMP services. |
|
Step 2. On the UserGate server, copy the token to the clipboard. |
On the UserGate server that you want to add as a sensor, go to the General settings ‑-> Log Analyzer section and copy the token value to the clipboard. It will be needed at Step 4. |
|
Step 3. On the LogAn server, enable the Log Analyzer service in the required zone. |
On the LogAn server, go to the Network --> Zones section, select the zone containing the network interfaces through which network communication with the UserGate server will occur, and allow the Log Analyzer service. |
|
Step 4. Create a UserGate sensor. |
On the LogAn server, go to Sensors --> UserGate sensors, click Add, and fill in the relevant fields. |
These are as follows:
|
Name |
Description |
|---|---|
|
Enabled |
Enables or disables this UserGate sensor. |
|
Name |
The name of the UserGate sensor. |
|
Description |
An optional description of the UserGate sensor. |
|
Address |
The IP address of the UserGate server for which this sensor is being created. |
|
Log Analyzer address |
The IP address of the LogAn server that will be used on the UserGate server as the destination for logs. Only those IP addresses are available for selection that are assigned to interfaces in the zones where the Log Analyzer service is allowed. |
|
Token |
The token received on the UserGate server. |
After creating a sensor, the UserGate server starts sending data to the LogAn server.
The following configuration changes have occurred on the UserGate server:
-
In the General settings --> Log Analyzer section, the Log Analyzer server address has changed to the one specified during the creation of the UserGate sensor.
-
In the Diagnostics and monitoring --> SNMP section, an SNMP rule has been added that allows the Log Analyzer server to receive information using the SNMP protocol.
The following new items have been added to the LogAn server:
-
In the Logs and reports --> Logs section, records from the newly created UserGate sensors have appeared.
-
In the Dashboard section, you can now add a new widget, UserGate sensor graph, that contains information received from the UserGate sensor.
Note
If the administrator changes the SNMP rules on the UserGate server, LogAn will revert these settings or re-create the rule when the sensor is enabled or disabled on the LogAn server.