Cloud Managed Networks

Hi,

We wanted to setup forwarding for our user traffic logs to our SOCs syslog server.

My understanding is that you need to setup the syslog server in Central on the Branch gateway group and enable logging on every policy?

The thing is that when we enable the logging on the policy, The gateway starts logging all user-logs locally.

We only want to forward the logs, Not have it both forwarded and locally on the Gateway.

Is there a way to do this?

-------------------------------------------

AFAIK this is how it works. generally you may not need logging for all the rules in a user policy, the other way is to log only the deny rules.

------------------------------
If my post was useful accept solution and/or give kudos.
Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
------------------------------