User guide

ManageEngine Firewall Analyzer :: User Guide
167
Zoho Corp.
configure mail server for Firewall Analyzer. Select the schedule for report
generation using the Get Report for Every <1 to 31> day(s) @ <0 to 23>
Hrs <0 to 50> Min. (For example: If you configure like Every 10 day(s) @ 2
Hrs 30 Min, the reports will be generated for the device, every 10 days at 02:30
AM), For the <Previous Week, Last 7 Days, Previous Month, Last 30
Days> for the selected duration. Select the report format to be sent via em ail
using the PDF, CSV radio buttons.
17. Select the Yes or No radio button of Periodic rule/configuration fetching
option to fetch the rules/configurations periodically or once.
a. Select Yes radio button to fetch the rules/configurations periodically. The
periodicity option opens up. Select the periodicity of rules fetching from
the combo boxes given in: Every <1 to 31> day(s) @ <0 to 23> Hrs
<0 to 50> Min. (For example: If you configure like Every 10 day(s) @
2 Hrs 30 Min, the rules will be fetched from the device, every 10 days at
02:30 AM)
b. Select No radio button to fetch the rules/configurations once.
18. Click Test Now button, to test the validity of the device info; otherwise, click
Save button to apply the values. Click Cancel to cancel the adding device info
operation.
If the Firewall Analyzer is not receiving the logs directly from the Firewall device
(i.e., the logs are received from a log forwarder tool), to fetch the rules from the
Firewall device, configure the IP Address of the actual Firewall. Configure the IP
Address, using Secondary Info > IP Address field.
Generating Change Management Report is supported for the following devices:
• Cisco
• Fortigate
• Netscreen
• Juniper SRX
Getting Rules/ Configuration Information from the individual virtual
Firewalls (vdom/context)
• Add Device Info menu supports fetching the rules/configurations for the
Firewall devices. It lists only the physical devices in the Select Device drop
down list. It does not distinguish between vdom/context enabled Firewall and
normal Firewall device. By default, both the vdom/context Firewall (if any)
and the physical Firewall rules and configurations are fetched.
• If you want to fetch the rules/configurations for a selected vdom/context
individually, create a separte Device Profile and associate the vdom/context
to the profile for which you need the reports. Select the option 'Display
Virtual Domains in the below resources list.' in Associate Profiles to
Devices page. It lists both the virtual Firewalls (vdom/context) and the
physical Firewall devices in the Select Device drop down list.