WatchGuard Firewall (NetIQ Format)
Cyfin Reporter is designed to work with WatchGuard Firebox models. It integrates easily into your current system configuration. Scroll down or click on these links for details.
Cyfin Reporter is installed on a server, not on the WatchGuard appliance
Logfile Setup
Logfile Type: Watchguard Firebox (NetIQ Format)
Default Directory: (drive):\My Documents\My WatchGuard\Shared WatchGuard\reports
Configuration Notes
Depending on your Firebox version, you may need to “export” the Watchguard proprietary database logfiles (.wgl) into a text logfile using the NetIQ output type. Here's how:
- Run the "Historical Reports" option in the Watchguard System Manager console (Historical Reports).
- Highlight desired report, click Edit, and on the Setup tab choose the "NetIQ" Output Type. Click OK to save changes.
- In Report Properties, on the Sections tab, select both checkboxes in the lower left (Authentication Resolution on IP addresses, and DNS Resolution on IP addresses).
- Still in Report Properties, on the Time Filters tab, examine the Time Stamps bullets to make sure GMT (Coordinated Universal Time) is selected.
NOTE: NetIQ measures data by calculating the number of URL requests. WatchGuard HTTP proxy logging must be turned on to supply the logging information required for reports.
After report output type is changed to NetIQ
The report appears as a .txt file in the following path: (drive):\Watchguard Logs\reports\webtrends. The files in the webtrends folder are what Cyfin needs - ignore the other reports in the "reports" directory.
NOTE: Our product also supports the Syslog ' WELF' format. View more information about storing Syslog data.
WARNING: By upgrading to the WatchGuard Fireware® 10 and Edge 10 OS releases for WatchGuard Firebox X Peak, Core and Edge families of appliances, you will lose the XML log file function from your previous version. The logging will default to using the PostGRE SQL database storage format. This change makes the logging from your Watchguard firewall incompatible with the Cyfin Reporter application. The Firebox Core series does offer WSM (Watchguard System Manger) software that allows you go convert the database into a text file for use with the Cyfin Reporter application. The Edge series firewalls do not offer this WSM option.
Use the links below for more information on our products and services.