Sonicwall-MCP-Server

Overview

This is a fully MCP-compliant server that connects to SonicWall firewalls running SonicOS 7.x and 8.x. It provides intelligent log analysis, real-time threat detection, and security insights through a natural language interface. The server supports both Docker and Node.js deployment with comprehensive documentation and configuration options. It includes tools for analyzing logs, detecting threats, searching connections, getting network statistics, and exporting logs for compliance purposes.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

• analyze_logs

  Natural language log analysis with intelligent insights

  Try:Show me suspicious network activity from external IPs in the last 2 hoursTry:Find brute force attacks on SSH and RDP portsTry:Analyze malware detections and their source locations
• get_threats

  Real-time threat monitoring and analysis

  Try:Get critical threats from the last 24 hoursTry:Show me high severity security alertsTry:List recent ransomware attempts
• search_connections

  Advanced connection search and investigation

  Try:Investigate suspicious connections from IP 192.168.1.100Try:Find all VPN authentication attemptsTry:Show blocked connections from specific countries
• get_stats

  Network statistics and security metrics

  Try:Get top blocked IPs this monthTry:Show bandwidth usage statisticsTry:Display security event frequency by type
• export_logs

  Export filtered logs for compliance and analysis

  Try:Export security events as CSV for last weekTry:Generate firewall audit reportTry:Export all critical threat detections to JSON

Comparable tools

Installation

git clone https://github.com/gensecaihq/sonicwall-mcp-server.git
cd sonicwall-mcp-server

cp .env.example .env

SONICWALL_HOST=192.168.1.1
SONICWALL_USERNAME=admin
SONICWALL_PASSWORD=your_password
SONICWALL_VERSION=7  # or 8

docker compose up -d

{
  "mcpServers": {
    "sonicwall": {
      "transport": "sse",
      "url": "http://localhost:3000/mcp/v1/sse"
    }
  }
}

FAQ

Which SonicWall versions are supported?

The server supports both SonicOS 7.x and 8.x with automatic version detection and version-specific features.

How do I enable API access on my SonicWall?

Navigate to MANAGE > System Setup > Appliance > SonicOS API in your SonicWall web interface and enable API access.

Compare Sonicwall-MCP-Server with