Got it
Huawei Enterprise Support Community
Community Forums Security
Eudemon - 1000E - Logs

Eudemon - 1000E - Logs

Latest reply: Oct 29, 2021 06:26:10 335 9 0 0 0
View the author 1#

Hi Guys, 

I would like to see all the traffic that is being passed / dropped over the Eudemon. 
I want to see the source / destination IPs and Ports. 

Is it possible to view something like this in the Eudemon 1000E ??

Thanks 

Eudemon1000EEudemonFirewall logs

Like (0) Dislike (0) Favorite(0) Share Report
Previous: How do I differentiate the access between departments
Next: Passwordless authentication and its advantages
(1) (0)
2#
little_fish
Admin Created Oct 25, 2021 14:49:40

Dear we are working on it now.
View more
  • x
  • convention：
(0) (0)
3#
chenhui
Admin Created Oct 25, 2021 15:00:08

I was wrong.

URL logs only record the blocked URL.

To review the traffic logs, please follow the steps below:

  1. Choose Monitor > Log > Traffic Log.

  2. Choose Customize and select/deselect conditions for traffic log display.

  3. Optional: Click Export to export traffic logs in CSV format to the management PC.

  4. Click Advanced Query and enter search criteria to search for traffic logs.

Note: Before querying traffic logs, you have run the log type traffic enable command to enable the recording of traffic logs.


For more information, you can refer to https://support.huawei.com/hedex/hdx.do?docid=DOC1100320299&id=sec_admin_monitor_logrep_0030&lang=en


View more
  • x
  • convention：

KasunRajapakse
KasunRajapakse Created Oct 25, 2021 15:54:20 (0) (0)
So what you are saying is that the Eudemon can only log traffic that was blocked?
And it cannot log traffic that was allowed?


If so, how can we configure the Eudemon to log the blocked traffic?

Thanks  
KasunRajapakse
KasunRajapakse Reply KasunRajapakse  Created Oct 25, 2021 16:13:08 (0) (0)
I'm interested in see what traffic was passed / what traffic was dropped. As we would see on many other firewalls.  
(0) (0)
4#
KasunRajapakse
Created Oct 26, 2021 08:43:12

Posted by chenhui at 2021-10-25 15:00 I was wrong.URL logs only record the blocked URL.To review the traffic logs, please follow the steps ...
Hi,

I have a Eudemon1000E, - So I don't have a GUI to enable anything.
Can any of this be enabled from the CLI?
View more
  • x
  • convention：
(0) (0)
5#
chenhui
Admin Created Oct 26, 2021 11:58:49

Posted by KasunRajapakse at 2021-10-26 08:43 Hi, I have a Eudemon1000E, - So I don't have a GUI to enable anything. Can any of this be enabled ...
Please refer to the example (https://support.huawei.com/hedex/hdx.do?docid=DOC1100320299&id=sec_admin_log_0033&lang=en) to send the logs to the log server.
View more
  • x
  • convention：

user_3671176
user_3671176 Created Oct 26, 2021 15:31:50 (0) (0)
Hi Chenhui,
I don't have access to that document.
""You do not have the required permissions to perform this operation !""
Is it possible to share a an external link?  
chenhui
chenhui Reply user_3671176  Created Oct 29, 2021 06:24:48 (0) (0)
Please bind your support account with your product to promote the account privilege.  
(0) (0)
6#
chenhui
Admin Created Oct 29, 2021 06:26:10

@user_3671176
Please refer to the configuration steps below:
Enable the function of sending dataflow service logs.
[FW] dataflow enable
Enable the traffic log function. By default, the traffic log function is used on the FW. If the function is disabled, run the following command to enable it:
[FW] log type traffic enable
Enable the threat log function. By default, the threat log function is used on the FW. If the function is disabled, run the following command to enable it:
[FW] engine log av enable
[FW] engine log ips enable
Configure log hosts.
[FW] firewall log host 1 172.16.0.2 9002
[FW] firewall log host 2 172.16.0.3 9002
Enable the log concurrent function and configure the source IP address and source port.
[FW] firewall log session multi-host-mode concurrent
[FW] firewall log source 172.16.0.1 6000
View more
  • x
  • convention：
Back to list

Comment

Advanced
B Color Image Link Quote Code Smilies
You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login
Huawei Website Support About Huawei Privacy User Agreement Terms of Use Cookies Cookie Settings
Huawei Enterprise Huawei Carrier Forum Training & Certification

Contact Us: e_online@huawei.com Copyright © 2022 Huawei Technologies Co., Ltd. All rights reserved.

APP

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.