Speak to an expert : Live Chat exa online chat

Police CyberAlarm Draytek setup

Enable Police CyberAlarm access with these steps…

This is a 3 step process, the first showing how to set up Syslog for Police CyberAlarm on Draytek firewalls, the second will be showing you how to set up outbound NAT, step three will be showing you how to link the outbound NAT to a SurfProtect profile (You do not need to complete steps 2 and 3 if SurfProtect is not in use)

Step 1: Setting the SysLog server

  • Log into the Draytek and go to the menu section on the left. Go down to ‘System Maintenance’ and choose the ‘SysLog/Mail Alert’ section:
police cyber alarm draytek setup
  • Once there, enable the SysLog and choose the ‘Syslog Server’ option under ‘Syslog Save to’. It will ask for ‘Server IP/Hostname’ (It will need to be IP not Hostname) and choose the ‘Destination port’
police cyber alarm draytek setup

Step 2: Setting up an outbound NAT

Once the SysLog has been set up, we need to do an outbound NAT. An outbound NAT means changing the WAN IP for one specific device so it is different to the WAN interface. 

  • On the Draytek Menu on the left hand side choose ‘WAN’ and ‘Internet Access’

  • Depending on which WAN port is used, go into it by clicking on ‘Internet Access’. When you are on the next page find ‘WAN IP Alias’ and click it.
police cyber alarm draytek setup
  •  Another box should appear with the IP alias’. Under the next available one, enable it and enter the External IP you will use.
police cyber alarm draytek setup
  • Click ‘OK’ which will save the changes made.
  • Go to the Menu and click ‘Routing’ and ‘Load-Balance/Route Policy’

  • Enable the rule and Name it ‘CyberAlarm’
  • Enter the IP address of the server under ‘Source’. The rest can remain how it is.

  • Under ‘Interface’ choose the correct WAN port in use and the IP address you added in WAN IP Alias will display here. Choose this.

  • Save the setting by clicking ‘OK’
police cyber alarm draytek setup

Step 3: Creating a SurfProtect profile

Please skip this step if you do not use SurfProtect.

We will need to setup a SurfProtect profile which has ‘HTTPS decryption disabled’.

surfprotect login page
  • Once logged in go into the profiles. This is done by clicking the blue eye next to the relevant location.
  • You will see a list of profiles the school has created and the default profile. Where it says ‘Filtering profiles’ there will be a green + symbol, click on this.
  • You will see a box labelled ‘Create new profile’ pop up, follow the onscreen instructions.

  • The first thing to do is name the profile. This can be called ‘CyberAlarm’

  • Click ‘Next’
Screenshot 2022 03 31 at 13.04.57
  • You will need to configure the next bit which is ‘Matching’ here, pick the IP that we used in the 1-to-1 NAT.
  • Carry on going through the onscreen instructions and create the profile.
  • Once the profile has been created, go into it by clicking the ‘blue eye’ and looking towards the bottom of the page, it will say ‘Advanced Policy Setting’ and disabling the setting under there.
Screenshot 2022 03 31 at 13.11.12

You should now be able to run Police CyberAlarm through your Draytek.

ISPA Testing

The Exa Foundation

Contact us



Office hours

Monday: 8:30am – 5pm
Tuesday: 8:30am – 5pm
Wednesday: 8:30am – 5pm
Thursday: 8:30am – 5pm
Friday: 8:30am – 5pm
Saturday: Closed
Sunday: Closed

Technical Support

Contact us

Email: helpdesk@exa.net.uk
Phone: 0345 145 1234

Office hours

Monday: 8am – 6pm
Tuesday: 8am – 6pm
Wednesday: 8am – 6pm
Thursday: 8am – 6pm
Friday: 8am – 6pm
Saturday: 10am – 4pm
Sunday: 10am – 4pm