Enterasys Security Information and Event Manager, Configuration Manual

Page: 111 / 426

Configuring DSMs
Enterasys NetSight Automatic Security Manager 95
Enterasys NetSight
Automatic Security
Manager
The Enterasys NetSight Automatic Security Manager DSM accepts events using
syslog. SIEM records all relevant events. Before configuring an Enterasys
NetSight Automatic Security Manager device in SIEM, you must configure your
device to send syslog events to SIEM.
To configure the device to send syslog events to SIEM:
Step 1
Log in to the Automatic Security Manager user interface.
Step 2
Click the Automated Security Manager icon to access the Automated Security
Manager Configuration window.
NOTE
You can also access the Automated Security Manager Configuration window
from the Tool menu.
Step 3
From the left navigation menu, select Rule Definitions .
Step 4
Choose one of the following options:
a
If a rule is currently configured, highlight the rule. Click Edit .
b
To create a new rule, click Create .
Step 5
Select the Notifications check box.
Step 6
Click Edit .
The Edit Notifications window is displayed.
Step 7
Click Create .
The Create Notification window is displayed.
Step 8
Using the Type drop-down list box, select Syslog .
Step 9
In the Syslog Server IP/Name field, type the IP address of the device that will
receive syslog traffic.
Step 10
Click Apply .
Step 11
Click Close .
Step 12
In the Notification drop-down list box, select the notification configured above.
Step 13
Click OK .
Step 14
You are now ready to configure the log source in SIEM.
To configure SIEM to receive events from an Enterasys NetSight Automatic
Security Manager device:

From the Log Source Type drop-down list box, select Enterasys
NetsightASM .
For more information on configuring log sources, see the Log Sources User Guide .
For more information about your Enterasys NetSight Automatic Security Manager
device, see your vendor documentation.