Skip to content

Configure F5 ASM to send CEF messages

Follow the instructions in F5 Configuring Application Security Event Logging to set up remote logging, using the following guidelines:

  1. Set the Remote storage type to CEF.
  2. Set the Protocol to TCP.
  3. Set the IP address to the LogSentinel Collector's IP address.
  4. Set the port number to 2514, or the port you have configured in the LogSentinel Collector


Make sure that all firewalls (including the firewall on the collector machine) allow connections to the collector port