Draytek Vigor 3300V Firewall

Archived

The application normalizes Draytek Vigor 3300V Firewall events and enables you to analyze Draytek Vigor 3300V Firewall data. You can further customize the searches to perform in-depth analysis.

Release Details

Version: 5.0.0

Release date: 2020-05-14

Supported On: LogPoint v6.0.0 and later

SHA 256: de10bff37555032a77c897cc24ec4b4cc985c70fe65731519fb86f7bbaae536f

Download

Package Details

Normalization Package
- LP_Draytek Vigor 3300V Firewall

Enhancement

A minor update has been done in the application’s normalizer for better signature handling.

Installation

Follow these steps to install the Draytek Vigor 3300V Firewall v5.0.0 plugin:

Download the Draytek Vigor 3300V Firewall package from the Download section above.
Create a collection policy with the Syslog collector and appropriate processing policy.
Assign the policy to the device.

Log Format

Draytek Vigor Firewall

Log Sample

<174>Nov 25 09:00:00 Vigor3300: LAN_Status:[Tx=74469 Rx=74152 ] WAN_Status:[GW_IP=1.1.1.1 BBandMode=PPPoE BBandIp=1.1.1.1 BBandTxPkt= BBandTxRate=0 BBandRxPkt= BBandRxRate=0 BBandUpTime=0:15:43] Model:[Style=0 ModelName?=Vigor3300 ]

<135> Aug 24 12:21:37 Vigor3300: Blocking Donkey connection, Local user 1.1.1.1

To export data to LogPoint use Syslog collector on port 514 on the LogPoint server.

Support

If you have any questions or require assistance, create a support ticket.