WatchGuard Firewall
StandardWatchGuard Firewall protects private networks from unauthorized users on the internet. In Logpoint, WatchGuard Firewall enables you to collect and normalize WatchGuard Firewall logs and lets you analyze the information through the LP_Watchguard Firewall dashboard.
Enhancement
KB-22646
Added Syslog Collector based WatchGuard log source template, simplifying the log source configuration process. To learn more, go to Creating Log Source via a Template .
Bug Fix
PLUG-1582084773
The host field in WatchGuard Firewall logs wasn’t normalized because normalizers failed to parse unexpected log patterns. Go to Expected Log Samples for details on the expected patterns.
Past Releases
WatchGuard Firewall v5.2.1 ▾
Bug Fix
PLUG-1571786117
Logs were not normalized because normalizers failed to parse unexpected log patterns.
WatchGuard Firewall v5.2.0 ▾
Enhancement
KB-22646
Added Syslog Collector based WatchGuard log source template, simplifying the log source configuration process. To learn more, go to Creating Log Source via a Template .
WatchGuard Firewall v5.1.2 ▾
Enhancement
KB-17982
Added LP_Watchguard System Manager normalization package to normalize Watchguard System Manager logs.
Bug Fixes
KB-21066
Some WatchGaurd logs were not normalized by WatchGaurdCompiledNormalizer .
KB-19432
The s ource_address and destination_address fields were missing in some WatchGuard logs.
WatchGuard Firewall v5.1.1 ▾
Enhancements
KB-1648665348
Added LP_Watchguard WifiCloud normalization package to normalize Watchguard WifiCloud logs.
KB-1649965410
Added new labels in WatchguardCompiledNormalizer for Watchguard v12 logs based on the message_ID . To learn more, go to Watchguard Labels .
KB-1655565620
Added signatures in LP_Watchguard Firewall to normalize Watchguard logs.
WatchGuard Firewall v5.1.0 ▾
Enhancements
KB-1406159292
Added new signatures in WatchguardCompiledNormalizer for the Watchguard events with the message IDs 30000148 and 30000149 .
Added the following taxonomies:
-
geo_srctosource_country -
tls_profiletossl_version -
tls_profiletossl_profile
KB-1587063142
Added new signatures in LP_WatchguardFirewall and WatchguardCompiledNormalizer to support the Watchguard v12 logs for LogPoint UEBA.
Bug Fix
KB-1349157266
Some Watchguard FW/IPS logs were not properly normalized.
WatchGuard Firewall v3.4.0 ▾
Enhancement
A minor update has been done in the WatchGuard Firewall's normalizer for better signature handling.
Support
If you have any questions or require assistance, create a support ticket.
Comments
Article is closed for comments.