Syslog events - IPS, APP-ctrl
We are trying to configure the syslogs for watchguard firebox 12.8.2. We have enabled forwarding only Alarm events and system events on local 0 and local 1 respectively.
We could not find any IPS, App-ctrl events logged in to our syslog server, even though they are enabled in the policy.
We could also see in Firebox configuration file that column "Alarm" is disabled for all Firewall policies.
When we try to turn ON the Alarm for firewall policies, we could not see the checkbox for Alarm (Edit settings--> Advanced tab).
Please suggest on what is the issue.