Dell Switch Logs

Updated Nov 10, 2023

Configure a Dell switch to send logs to Arctic Wolf using the GUI

Note: This is an optional configuration. Before starting this procedure, contact your Concierge Security® Team to discuss this log forwarding option.

You can configure Dell switch® to send the necessary logs to Arctic Wolf®.

Requirements

Steps

  1. Create an address object on a SonicWall firewall.
  2. Configure a syslog server on a SonicWall firewall.
  3. Provide your Dell information to Arctic Wolf.

Step 1: Create an address object on a SonicWall firewall

  1. Sign in to the SonicWall console with administrator permissions.

  2. In the menu bar, click OBJECT.

  3. In the navigation menu, click Match Objects > Addresses > Address Objects.

  4. Click +Add.

  5. In the Address Object Settings dialog, configure these settings:

    • Name — Enter a unique name for your Arctic Wolf physical or virtual sensor.
    • Zone Assignment — Select LAN.
    • Type — Select Host.
    • IP Address — Enter the IP address of your physical or virtual sensor.
  6. Click Save.

Step 2: Configure a syslog server on a SonicWall firewall

  1. Sign in to the SonicWall console with administrator permissions.

  2. In the menu bar, click DEVICE.

  3. In the navigation menu, click Log > Syslog.

  4. On the Syslog Servers tab, click +Add.

  5. In the Add Syslog Server dialog, configure these settings:

    • Name or IP Address — Select your Arctic Wolf physical or virtual sensor name.
    • Port — Enter 514.
    • Server Type — Select Syslog Server.
  6. Click Add.

Step 3: Provide your Dell information to Arctic Wolf

  1. Sign in to the Arctic Wolf® Unified Portal.

  2. Click Help > Open a New Ticket.

  3. On the Open a New Ticket page, configure these settings:

    • What is this ticket related to? — Select General request.
    • Subject — Enter Syslog changes.
    • Related ticket (optional) — Keep blank.
    • Message — Enter this information for your Concierge Security® Team (CST):
      • Confirmation that you completed the steps in this configuration guide.
      • The IP address or hostname you used during the configuration.
      • Any questions or comments that you have.
  4. Click Send Message.

    Your CST will review the details, and then confirm that Arctic Wolf is successfully processing the logs.

See also