Integrating SonicWALL Firewall

To integrate SonicWALL, do the following procedures, below:

• To configure SonicWALL to forward syslog events
• To set up Barracuda XDR Dashboard

To configure SonicWALL to forward syslog events

SonicWALL captures all SonicOS event activity.

Syslog events are forwarded to QRadar. SonicWALL events that are forwarded to QRadar are automatically discovered and log sources are created automatically. For more information on configuring your SonicWALL appliance or for information on specific events, see your vendor documentation.

1. Log in to your SonicWALL web interface.

2. From the navigation menu, select Log > Syslog.

3. From the Syslog Servers pane, click Add.

4. In Name or IP Address, type the IP address of your QRadar Console or Event Collector.

5. In Port , type 514.
   SonicWALL syslog forwarders send events to QRadar by using UDP port 514.

6. Click OK.

7. From the Syslog Format list, select Default.

8. Click Apply.

To set up Barracuda XDR Dashboard

1. In Barracuda XDR Dashboard, click Administration > Integrations
2. On the SonicWALL Firewall card, click Setup.
3. Select Enabled.
4. Click Save.