Configuring DSMs
2
I
NSTALLING
DSM
S
The Enterasys Extranet contains RPM files that allow you to install new or update
existing DSMs. Updated DSMs contain improved event parsing for network
security products and enhancements for event categorization in the SIEM
Identification Map (QIDmap).
To install a DSM, perform the following steps:
Step 1
Download the file to your system hosting SIEM.
Step 2
Using SSH log in to SIEM, as the root user.
Username:
root
Password:
<password>
Step 3
Navigate to the directory that includes the downloaded file.
Step 4
Type the following command:
rpm -Uvh <filename>
Where
<filename>
is the name of the downloaded file. For example:
rpm -Uvh DSM-CheckPointFirewall-7.0-209433.noarch.rpm
Step 5
Log in to SIEM.
https://
<IP Address>
Where
<IP Address>
is the IP address of the SIEM system.
Step 6
On the
Admin
tab, click
Deploy Changes
.
Summary of Contents for Security Information and Event Manager
Page 2: ......
Page 8: ......
Page 20: ......
Page 22: ......
Page 24: ......
Page 26: ......
Page 32: ......
Page 34: ......
Page 36: ......
Page 38: ......
Page 44: ......
Page 58: ......
Page 90: ......
Page 92: ......
Page 94: ......
Page 114: ......
Page 116: ......
Page 122: ......
Page 124: ......
Page 126: ...Configuring DSMs 110 FIREEYE...
Page 128: ......
Page 130: ......
Page 132: ......
Page 136: ......
Page 140: ......
Page 144: ......
Page 172: ......
Page 176: ...Configuring DSMs 160 ISC BIND...
Page 180: ......
Page 182: ......
Page 184: ......
Page 204: ......
Page 224: ......
Page 246: ......
Page 250: ......
Page 256: ......
Page 260: ......
Page 276: ......
Page 282: ......
Page 284: ......
Page 306: ......
Page 308: ......
Page 318: ......
Page 322: ......
Page 324: ......
Page 346: ......
Page 356: ......
Page 366: ......
Page 384: ......
Page 392: ......
Page 394: ......
Page 396: ......
Page 398: ......
Page 404: ......
Page 426: ......