Skip to content

Connect Citrix WAF

Citrix WAF sends syslog messages in CEF format to a the LogSentinel Collector's syslog listener. Follow Citrix's instructions to:

  1. Configure the WAF
  2. Configure CEF logging
  3. Configure sending the logs

Make sure you send the logs to TCP port 514 on the log collector's machine's IP address.


Make sure that all firewalls (including the firewall on the collector machine) allow connections to the collector port