Appearance
Radware WAF Integration
Configuring Radware DefensePro to Send Data to Realm Security
Realm Security collects log data from Radware WAF via Syslog. The steps for configuring Syslog forwarding via DefensePro are as follows:
Prerequisites
- Administrative access to the DefensePro Web UI
- Realm collector is setup and running with a Raw TCP Stream. See Realm Collector install guide for setting up a collector.
- Realm Security Raw TCP collector IP address or FQDN
- Realm Collector receiving port number. In Realm console, go to Collectors > select collector > Copy port number listed for the Stream.
Configure Radware DefensPro syslog forwarding to Realm Security
You can see more options on how to configure DefensePro Syslog Settings, see this DefensPro Support page https://support.radware.com/app/answers/answer_view/a_id/19907/~/configuring-defensepro-syslog-settings
- In DefensePro Configuration, go to Setup > Reporting Settings > Syslog and check the Enable Syslog box.
- Configure the parameters with the correct Server Address and port, and select TCP for the protocol
- Facility can be configured to any desired value. This is sent with the forwarded logs and can be used to help distinguish between different devices.
