User guide

Setting up the WatchGuard Security Event Processor
User Guide 181
If the WatchGuard Security Event Processor icon is not in the tray, in
Control Center, select Tools => Logging => Event Processor Interface. To
start the Event Processor interface when you log in to the system, add a
shortcut to the Startup folder in the Start menu. The WatchGuard
installation program does this automatically if you set up logging.
Starting and stopping the WSEP
The WSEP starts automatically when you start the host on which it
resides. However, it is possible to stop or restart the WSEP from its
interface at any time. Open the WatchGuard Security Event Processor
interface:
• To start the WSEP application, select File => Start Service.
• To stop the WSEP application, select File => Stop Service.
Setting the log encryption key
The log connection (but not the log file) between the Firebox and a log
host is encrypted for security purposes. Both the Management Station and
the WSEP application must have the same encryption key.
N OTE
You must enter an encryption key for the log host to receive logs from the
Firebox. It must be the same key used when adding a WSEP application
to the Management Station.