Up
Previous Next

Sheriff CSM™

D-Link UTM Firewall

When you configure D-Link UTM Firewall to send log data to Sheriff CSM, you can use the D-Link UTM Firewall plugin to translate raw log data into normalized events for analysis. The table below provides some basic information for the plugin:

Plugin Information

Device	Details
Vendor	D-Link
Device Type	Firewall
Connection Type	Syslog
Data Source Name	D-Link UTM Firewall
Data Source ID	1898

Integrating D-Link UTM Firewall

Before you configure the D-Link UTM Firewall integration, you must have the IP Address of the Sheriff CSM Sensor (Deputy).

To configure the D-Link UTM Firewall to send log data to Sheriff CSM using the Syslog protocol

1. Log in to the firewall. After logging in, set your firewall’s WAN settings as required by your Internet provider and your organization's own guidelines.

   Note: The default URL used to access the firewall is https://192.168.10.1. The default username is admin and password is admin.

2. Enable logging for the desired IP rules. To monitor outgoing traffic, you need to enable logging in the main NAT rule. To do that, select Policies > Main IP Rules > lan_to_wan > edit the “allow_standard” rule from the D-Link admin program and select the “Enable logging” check box on the Log Settings tab page.

   

3. Specify the server to receive log and event information.

   1. All Select Objects > Address Book from the D-Link admin program and add the IP4 address of the Sheriff CSM Sensor.
   2. Select System > Device > Log and Event Receivers and add a new Syslog Receiver that points to your Sheriff CSM Sensor's IP address.

      

Plugin Enablement

For plugin enablement information, see Enable Plugins.

Additional Resources and Troubleshooting

https://www.manualslib.com/download/663992/D-Link-Netdefend-Dfl-210.html

https://www.manualslib.com/manual/663992/D-Link-Netdefend-Dfl-210.html#product-DFL-860

For troubleshooting, see the vendor documentation.