This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

NETFLOW - SYSLOG Wrong Source Interface

Sending Syslog and NETFLOW to a external FLOW and Logging server that is in Azure.

The device shows up as the IP address of the Azure Tunnel (which is on the WAN Interface) not as the Management Interface of the Sophos.

Need to change the source interface of both services. The other issue is I have four Sophos with Azure VPNs and all four are showing the same IP address.

This thread was automatically locked due to age.

Top Replies

LuCar Toni over 2 years ago in reply to Ben Sanderson +1 verified

Should be possible with the CISH command: Try: https://support.sophos.com/support/s/article/KB-000035607?language=en_US If this does not work, try a SD-WAN Route instead. In SD-WAN use ANY - ANY and…

Parents

0 Ben Sanderson over 2 years ago

Bump, anyone know a way to source services from a different interface? Especially with Servers that are in Azure?
Cancel
Vote Up 0 Vote Down

Cancel
+1 LuCar Toni over 2 years ago in reply to Ben Sanderson

Should be possible with the CISH command: Try: https://support.sophos.com/support/s/article/KB-000035607?language=en_US

If this does not work, try a SD-WAN Route instead. In SD-WAN use ANY - ANY and Service: Syslog.

__________________________________________________________________________________________________________________
Cancel
Vote Up +1 Vote Down

Cancel
0 Ben Sanderson over 2 years ago in reply to LuCar Toni

Thanks LuCar, the CISH command worked perfectly!
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Ben Sanderson over 2 years ago in reply to LuCar Toni

Thanks LuCar, the CISH command worked perfectly!
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data