Syslog configuration

What's the result of diagnostic / Route lookup?

Possible you have to configure the IP used for "system generated traffic" ... like the ping from Firewall or Syslog

set advanced-firewall sys-traffic-nat add destination 10.10.2.15 snatip 10.10.1.1

or Add an IPsec route :

https://doc.sophos.com/nsg/sophos-firewall/19.5/help/en-us/webhelp/onlinehelp/AdministratorHelp/Authentication/HowToArticles/AuthenticationADIPsecRouteSysGenTraffic/index.html

if destination is pingable .. the ping should work first...

The only problem is the Fw sophos that does not send the logs to the syslog server, I also configured several servers that are on the LAN network, these if they are sending the logs.When ping the sophos fw to the syslog server the connection is successful.

Example of Syslog servers

The result is successful

The only problem is the Fw sophos that does not send the logs to the syslog server, I also configured several servers that are on the LAN network, these if they are sending the logs.When ping the sophos fw to the syslog server the connection is successful.

Example of Syslog servers

The result is successful

Bigd Last said:

When ping the sophos fw to the syslog server the connection is successful

... that's good

but what does the connection test have to do with syslog?

do you see syslog traffic at the "other" location?

do you configure something to log within "system services / log settings" ?

but what does the connection test have to do with syslog? To validate that there is communication with the server

Do you see syslog traffic at the "other" location? No

Do you configure something to log inside "system services / log settings"? Yes, you configure the ip of the server where you would be sending the logs as in the initial image.

The connection analyze is a theoretical test ...