# Firewall Log Management - Monitor and Analyze Firewall Logs

Operations management ensures IT network is kept up. It continuously monitors the nodes in the network for their availability. But, keeping the network up in itself won't suffice. The network has to be secured. For that you need to manage the firewalls, which keeps the network safe from the external attacks.

## Add Security Weapon to Operations Arsenal

Firewall log management compliments operations management performed by OpManager. It taps the full potential of the log data generated by firewalls to extract information crucial to the network security.

With firewall log analysis, you get security, compliance and bandwidth reports.

**Security reports are:**

- Virus
- Attack
- Spam
- Denied Hosts
- Event Summary

**Compliance reports are:**

- PCI-DSS
- ISO 27001
- SANS
- NIST
- NERC-CIP

**Bandwidth reports are:**

- Live Bandwidth
- Traffic Analyzer
- URL Monitor
- Employee Internet Usage

**OpManager supports analysis of the following firewall and security device logs:**

- Check Point
- Cisco PIX Device
- Cisco ASA Device
- CyberGuard
- Fortigate
- Microsoft ISA
- NetScreen
- SonicWALL
- WatchGuard

### Automatic Firewall Log Collection

Simply configure your firewall to forward logs to OpManager. Firewalls are then automatically detected and reports are generated instantly. It also supports firewalls that forward logs in WELF format.

![firewall-detection](https://www.manageengine.com/network-monitoring/images/firewall-detection.jpg)

### Firewall Logs Import

In the case of firewalls and other security devices that do not forward logs, you can import logs files directly in to OpManager and generate reports for the same.

![firewall-logs-import](https://www.manageengine.com/network-monitoring/images/firewall-logs-import.jpg)

### Specific Check Point Firewall Settings

OpManager lets you add LEA servers to establish connections and retrieve logs from Check Point firewalls. You can add as many LEA servers as needed, and set up authenticated or unauthenticated connections to retrieve firewall logs.

![add-check-points](https://www.manageengine.com/network-monitoring/images/add-check-points.jpg)

### Embedded Syslog Server

OpManager comes pre-bundled with a syslog server that listens for forwarded firewall logs at the defined listener ports. You can add more listener ports to this syslog server, to collect logs from different firewalls. The syslog server is a part of OpManager and does not require a separate installation.

![syslog-server](https://www.manageengine.com/network-monitoring/images/syslog-server.jpg)

### Export and Import Report and Alert Profiles

OpManager provides an easy way of saving the report and alert profiles. You can export the profiles and save it. You can import the profiles to get the profiles back. This will come handy in case of exigencies like when you are moving the server to a different machine etc.

![alarm-profiles](https://www.manageengine.com/network-monitoring/images/alarm-profiles.jpg)