Dell SonicWALL - Configuring LogWatcher on the Domain Controller

Dell SonicWALL Directory Services Connector 3.7
Administration Guide
43
Configuring LogWatcher on the Domain Controller
The DCConfig.xml file is used for configuration. The following XML snippet shows how the data is stored in the
DCConfig.xml file:
<SONICWALL_LOG_WATCHER>
<AGENTS>
<AGENT>
<IP_ADDRESS>10.50.173.252</IP_ADDRESS>
<PORT_NO>2259</PORT_NO>
</AGENT>
</AGENTS>
<SEC_KEY>abc123</SEC_KEY>
<IGNORE_TIME>10</IGNORE_TIME>
<LOG_LEVEL>0</LOG_LEVEL >
<LW_PORT_NO>2259</LW_PORT_NO>
<DC_IP>10.50.173.54</DC_IP>
</SONICWALL_LOG_WATCHER>
The above data fields are defined as follows:
Configuring/Enabling LogWatcher in Directory Services
Connector
To configure LogWatcher in Directory Services Connector, perform the following steps:
1 In the DSC Configuration Tool, right-click the SSO Agent or use the Actions menu to open the Properties
page of the SSO Agent.
2Select DC Security Log in the Query Source drop-down list.
3 Select the Add LogWatcher Support checkbox.
4 Enter the LogWatcher Port number (default is 2259).
5 Enter the LogWatcher Shared Key.
Table 1. LogWatcher data fields
IP_ADDRESS IP address of the SSO Agent
PORT_NO Port number of the SSO Agent for receiving the UDP packet
SEC_KEY Secret Key for encrypting the packet data
IGNORE_TIME (in seconds) Used to avoid successive user logon/logoff; default value is 10 seconds
LOG_LEVEL Can have any of three values:
• 0 (NOLOGS) - Do not log any messages
• 1 (ERRORSONLY) - Log only Error messages
• 2 (DIAGNOSTIC) - Log all messages
LW_PORT_NO LogWatcher port for sending the UDP packet
DC_IP IP address of the Domain Controller
NOTE: The SSO port number and shared key in the DCConfig.xml file on the Domain Controller
must be the same as the LogWatcher Port number and LogWatcher Shared Key.