Enterasys Security Information and Event Manager, Configuration Manual

Page: 211 / 426

Configuring DSMs
McAfee ePolicy Orchestrator 195
Step 6
Using the Protocol Configuration drop-down list box, select JDBC .
The JDBC protocol parameters are displayed.
NOTE
You must refer to the Configure Database Settings on your ePO Management
Console to configure the McAfee ePolicy Orchestrator DSM in SIEM.
Step 7
Configure the following values:
Table 39-2 McAfee ePO JDBC Parameters
Parameter Description
Log Source
Identifier Type the identifier for the log source. The log source identifier must
be added in the following format:
<McAfee ePO Database>@<McAfee ePO Database Server
IP or Host Name>
Where:
<McAfee ePO Database>
is the database name, as entered in
the Database Name parameter.
<McAfee ePO Database Server IP or Host Name>
is the
hostname or IP address for this log source, as entered in the IP or
Hostname parameter.
When defining a name for your log source identifier, you must use
the values of the McAfee ePO Database and Database Server IP
address or hostname from the ePO Management Console.
Database Type From the drop-down list box, select MSDE .
Database Name Type the exact name of the McAfee ePolicy Orchestrator
database.
IP or Hostname Type the IP address or host name of the McAfee ePolicy
Orchestrator SQL Server.
Port Type the port number used by the database server. The default
port for MSDE is 1433.
The JDBC configuration port must match the listener port of the
McAfee ePolicy Orchestrator database. The McAfee ePolicy
Orchestrator database must have incoming TCP connections
enabled to communicate with SIEM.
Note: If you define a Database Instance when using MSDE as the
database type, you must leave the Port parameter blank in your
SIEM configuration.
Username Type the username required to access the database.
Password Type the password required to access the database.
The password can be up to 255 characters in length.
Confirm
Password Confirm the password required to access the database. The
confirmation password must be identical to the password entered
in the Password parameter.