Gateway

Configuring Logs on NetScaler Gateway

When you configure logging on NetScaler Gateway, you can choose to store the audit logs on NetScaler Gateway or send them to a syslog server. You use the configuration utility to create auditing policies and configure settings to store the audit logs.

To create an auditing policy

  1. In the configuration utility, on the Configuration tab, expand NetScaler Gateway > Policies > Auditing.
  2. In Name, type a name for the policy.
  3. Select one of the following:
    • Syslog if you want to send the logs to a Syslog server.
    • Nslog to store the logs on NetScaler Gateway.

      Note: If you select this option, logs are stored in the /var/log folder on the appliance.

  4. In the details pane, click Add.
  5. Type the following information for the server information where the logs are stored:
    • In Name, type the name of the server.
    • Under Server, type the name or the IP address of the log server.
  6. Click Create and then click Close.

After you create the auditing policy, you can bind the policy to any combination of the following:

  • Globally
  • Virtual servers
  • Groups
  • Users

To bind an auditing policy globally

  1. In the configuration utility, on the Configuration tab, expand NetScaler Gateway > Policies > Auditing.
  2. Select either Syslog or Nslog.
  3. In the details pane, click Action and then click Global Bindings.
  4. In the Bind/Unbind Auditing Policies to Global dialog box, under Details, click Insert Policy.
  5. Under Policy Name, select a policy and then click OK.

To modify an auditing policy

You can modify an existing auditing policy to change the server to which the logs are sent.

  1. In the configuration utility, on the Configuration tab, expand NetScaler Gateway > Policies > Auditing
  2. Select either Syslog or Nslog.
  3. In the details pane, click a policy and then click Open.
  4. In Server, select the new server, and then click OK.

To remove an auditing policy

You can remove an auditing policy from NetScaler Gateway. When you remove an auditing policy, the policy is unbound automatically.

  1. In the configuration utility, on the Configuration tab, expand NetScaler Gateway > Policies > Auditing.
  2. Select either Syslog or Nslog.
  3. In the details pane, click a policy and then click Remove.
Configuring Logs on NetScaler Gateway