Configure a pfSense firewall to forward syslogs

1. Navigate to Status > System Logs
2. Enable syslog and enter the following for remote logging.
3. Source Address: the IP on the interface nearest the ActZero VM
4. IP Protocol: IPv4
5. Remote Log Servers: the internal IP of the ActZero VM
6. Remote Syslog Contents: select firewall events and VPN events
7. Navigate to Status > System Logs on the Settings tab
8. Check Send log messages to remote syslog server
9. Click Save to store the changes.

Reference pfSense documentation for further detail.

Was this documentation helpful? Please send us your feedback!