Identify which Firebox log came from

In dimension - is there a good way of ID-ing which firebox within a group generated a log?
I have a group setup in dimension. there are like 300 fireboxes in that group. I'm trying to look into some botnet destination logs i am seeing, but the logs don't indicate which firebox generated them. In some cases I've been able to trace the firebox by using the source nat of a packet if that is logged.

Comments

  • James_CarsonJames_Carson Moderator, WatchGuard Representative

    Hi @grahamo

    If you're in the dimension logs themselves, clicking the log line should show more info including the serial number of the firewall.

    If you're in a report or generated email, it'll usually show the friendly name of the firewall.

    I wouldn't suggest posting the report here, but if you need help open a support case with the report you're looking at attached (so that information stays private.) Support can help find a way to get that info for you, or get a feature request opened so it populates where you're looking.

    -James Carson
    WatchGuard Customer Support

  • ok thanks @James_Carson will do

Sign In to comment.