Enterasys Security Information and Event Manager, Configuration Manual

Page: 202 / 426

Configuring DSMs
186 J
UNIPER
N
ETWORKS
If you select the option Send Syslog from vGW management server , all
events forwarded to SIEM contain the IP address of the vGW management
server.
• Send Syslog from Firewalls - Distribute logging with each Firewall Security
VM providing syslog events.
Step 5
Type values for the following parameters:
a
Syslog Server - Type the IP address of your vGW management server if you
selected to Send Syslog from vGW management server . Or, type the IP
address of SIEM if you selected Send Syslog from Firewalls .
b
Syslog Server Port - Type the port address for syslog. This is typically port
514.
Step 6
From the External Logging panel, click Save .
Only changes made to the External Logging section are stored when you click
Save . Any changes made to NetFlow require that you save using the button within
NetFlow Configuration section.
Step 7
From the NetFlow Configuration panel, select the enable check box.
NetFlow does not support central logging from a vGW management server. From
the External Logging section, you must select the option
Send Syslog from
Firewalls .
Step 8
Type values for the following parameters:
a
NetFlow collector address - Type the IP address of SIEM.
b
NetFlow collector port - Type a port address for NetFlow events.
NOTE
SIEM typically uses port 2055 for NetFlow event data on Behavioral Flow
Collectors. You must configure a different NetFlow collector port on your Juniper
Networks vGW Series Virtual Gateway for NetFlow.
Step 9
From the NetFlow Configuration , click Save .
Step 10
You are now ready to configure the log source in SIEM.
SIEM automatically detects syslog forwarded from Juniper Networks vGW. If you
want to manually configure SIEM to receive syslog events:

From the Log Source Type drop-down list box, select Juniper vGW .
For more information on configuring log sources, see the Log Sources User Guide .
For more information, see your Juniper Networks vGW documentation.