Sending syslog messages over a vpn tunnel

[mgclark]

I've heard that Meraki strongly suggests to not send syslog traffic over a vpn tunnel.

I've not been able to find any documentation mentioning this. The only official docs I've found are these three.

Syslog Event Types and Log Samples

https://documentation.meraki.com/zGeneral_Administration/Monitoring_and_Reporting/Syslog_Event_Types...

Syslog Server Overview and Configuration

https://documentation.meraki.com/zGeneral_Administration/Monitoring_and_Reporting/Syslog_Server_Over...

Meraki Device Reporting - Syslog, SNMP and API

https://documentation.meraki.com/zGeneral_Administration/Monitoring_and_Reporting/Meraki_Device_Repo...

Has anyone noticed any performance hits to the MXs when sending syslog messages through a VPN tunnel with data and voice?

[cmr]

We send loads of syslogs over our SD-WAN VPN tunnels, haven't noticed it causing any issues and we run 50+ VoIP/video handsets at each site

[Nash]

@cmr Do you have to do the trick with the firewall rule, or does it just go for you? Thank you.

[cmr]

It just worked for us!

[Nash]

---

@cmr wrote:

It just worked for us!

---

This is a great answer, thank you! We're beginning to send syslog via VPN, assuming a vendor can tell which customer the traffic belongs to. The vendor originally wanted naked syslog over the internet. 😱

[cmr]

Now that is just ****** how can they not realise that is not a good idea? 😱

[Nash]

---

@cmr wrote:

Now that is just ****** how can they not realise that is not a good idea? 😱

---

It's a managed security services provider that specializes in banks.

So, you know... it's reassuring.