Send logs from a Windows Srv to a srv inside the same Lan and then to external envision
Is it possible to get a Windows server to send eventlogs to an internal server (Gateway Server) and then from that gateway server sent the logs by sftp or ftp or some other solution to the the envision collector on an external network?
Possibly. I haven't tested this exact scenario (I have tested the components involved in a different fashion successfully) but there is a facility in Windows 2003R2 and Windows 2008 to forward logs. Keep in mind that when you do that, you will lose the origin information. Effectively your log data will be indexed with the server that performed the relay. You should still be able to distinguish the logs by looking at the computer name within the logs, but your reporting/alerting could be impacted by this change.
That said, you should take a look at the Windows Remote Management (WinRM) service. It's not installed by default in Win2003 R2 (You'll have to use add/remove components). And this will only work for what we are labeling 'legacy logs' which are Application, Security and System.