Use the System Settings screen to configure a remote System Log server to store the log of activities performed directly on your AirDefense instance. This log can then be used for various purposes like performing security audits, audits for fulfilling statutory requirements, and other similar audits of your AirDefense installation.
When enabled, any activity performed directly on the AirDefense system, using its web interface, is logged automatically and then sent to the remote system log server.
An activity is an action that is performed directly on the AirDefense physical device. Logins, logouts, configuration changes, user management actions, and reboots are some of the activities that are recorded and forwarded to the remote system log server.
System log settings are managed from the System Settings screen. This screen displays when you select menu path from the AirDefense user interface.
The following screen displays.
If a remote system log server is already configured, this screen displays the IP address of the currently configured server.
Activity data from AirDefense is sent in the standard syslog format. Your system log server should listen for data on the standard port number 514.
Note
We do not support system log servers listening on non-standard ports.All activity log entries for your AirDefense server are sent with the following levels: