SSP : Remote syslog server configuration for SSPI.

Products

• VMware vDefend Firewall with Advanced Threat Prevention
• VMware vDefend Firewall

Issue/Introduction

A concern may arise regarding the lack of remote syslog server configuration support for SSPI. 

Environment

SSP 5.0 /SSP 5.1

Resolution

At this time, SSPI does not include an option to forward logs to a remote syslog server.

This limitation has been reviewed and confirmed with the product and engineering teams. The use case for log forwarding from SSPI has been acknowledged and will be considered for inclusion in a future release of the platform.

 

Additional Information

Below are the currently available log forwarding options for SSP:

Remote Logging on a MPS service VM.

Add Platform Syslog Server for SSP

Configure NDR to Send Event Logs to SIEM