This morning when i checked the FA i found that the security events are coming through but no web traffic. Very odd!
I checked the sonicwall and both 514 and 1514 are pointing to the FA server. Syslog Facility is set to local use 0.
Anyone have any ideas?