• SonicOS and SonicOSX 7 Device Log
• Settings
  • Filtering the Base Setup View
  • Configuring the Logging and Alert Levels
    • Setting the Logging Level
    • Setting the Alert Level
  • About Other Top Row Buttons
    • Edit Attributes of All Categories
    • Reset Event Count
    • Save Template
    • Import Template
      • Default Template
      • Minimal Template
      • Analyzer/ViewPoint/GMS Template
      • Firewall Action Template
      • Custom Template
    • View Logs
  • About the Log Settings Base Setup Table
    • Category Column
    • Color Column
    • ID Column
    • Priority Column
    • GUI Column
    • Alert Column
    • Syslog Column
    • Ipfix Column
    • Email Column
    • Event Count Column
    • Edit and Reset Count Icons
  • Configuring Event Attributes Globally
  • Configuring Event Attributes Selectively
    • Configuring Event Attributes by Category
    • Configuring Event Attributes by Group
    • Configuring Event Attributes by Event
    • About Filename Logging
• Syslog
  • About Event Profiles
  • About Syslog Server Profiling
  • Using a GMS Server for Syslog
  • Syslog Settings
  • Syslog Servers
    • Adding a Syslog Server
    • Editing a Syslog Server
    • Enabling Syslog Servers
    • Disabling Syslog Server
    • Deleting Syslog Servers
• Automation
  • Email Settings
  • Mail Server Settings
  • FTP Log Automation
  • Solera Capture Stack
• Name Resolution
• Reports
  • Data Collection
  • Viewing Data
  • Persistent Logging
• AWS
  • Enabling AWS Logs
• SonicWall Support
  • About This Document

Solera Capture Stack

Solera Networks makes a series of appliances of varying capacities and speeds designed to capture, archive, and regenerate network traffic. The Solera Networks Network Packet Capture System (NPCS) provides utilities that allow the captured data to be accessed in time-sequenced playback, that is, analysis of captured data can be completed on a live network through NPCS while the device is actively capturing and archiving data.

To configure your firewall with Solera

1. Select Enable Solera Capture Stack Integration option. If this option is not selected, all the other options are grayed out.
2. Select the host for the Solera server from the Server drop-down menu. You can dynamically create the host by selecting Create New Host.
3. From the Protocol drop-down menu, select either HTTP or HTTPS. The default is HTTPS.
4. In the Port field, enter the port number for connecting to the Solera server. The default port is 443.

5. In the DeepSee Base URL field, define the format for the base URL for the DeepSee path. The format can include special tokens; in the actual URL, the special tokens are replaced with the actual values. A default format is given.

   The following tokens can be used in the DeepSee Base URL and PCAP Base URL fields:

   • $host - server name or IP address that has the data

   • $port - HTTP/HTTPS port number where the server is listening

   • $usr - user name for authentication

   • $pwd - password for authentication

   • $start - start date and time

   • $stop - stop date and time

   • $ipproto - IP protocol

   • $scrip - source IP address

   • $dstip - destination IP address

   • $srcport - source port

   • $dstport - destination port

6. In the PCAP Base URL field, define the format for the base URL for the PCAP path. The format can include special tokens; in the actual URL, the special tokens are replaced with the actual values. For these tokens and their definitions, see Step 5. A default format is given.

7. In the Base64-encoded Link Icon field, define the Base 64-encoded GIF image to be used as desktop shortcut to the Solera server. Ensure the icon is valid and the size is as small as possible. A default icon is given.

8. From the Address to link from E-mail Alerts drop-down menu, select either Default LAN (default) or Default WAN.

9. If finished configuring settings on this page, click Accept.

   Clicking on Show Log Monitor displays you all the system logs.