Enterasys Security Information and Event Manager, Configuration Manual

Page: 213 / 426

Configuring DSMs
McAfee ePolicy Orchestrator 197
NOTE
Selecting a value for the Credibility parameter greater than 5 will weight your
McAfee ePolicy Orchestrator log source with a higher importance compared to
other log sources in SIEM.
Step 8
Click Save .
Step 9
Close the VA Scanners window.
Step 10
On the Admin tab, click Deploy Changes .
For more information on configuring log sources, see the Log Sources User Guide .
Configuring ePO to
Forward SNMP
Events
To configure ePO to forward events using SNMP, you must complete the following
configuration steps on your McAfee ePolicy Orchestrator device:
1
Add a registered server. For more information, see Adding a Registered Server to
McAfee ePO .
2
Configure the SNMP trap notifications on your ePO device. For more information,
see
Configuring SNMP Notifications .
3
Configure the log source and protocol in SIEM. For more information, see
Configuring the Log Source in SIEM .
Adding a Registered Server to McAfee ePO
Step 1
Log in to your McAfee ePolicy Orchestrator console.
Step 2
Select Menu > Configuration > Registered Servers .
Step 3
Click New Server .
The Registered Server Builder wizard is displayed.
Step 4
From the Server Type menu, select SNMP Server .
Step 5
Type the name and any additional notes about the SNMP server, click Next .
The Details page is displayed.
Step 6
From the Address drop-down list box, select the type of server address you are
using:
Use Named Pipe
Communication Clear the Use Named Pipe Communications check box.
When using a Named Pipe connection, the username and
password must be the appropriate Windows authentication
username and password and not the database username and
password. Also, you must use the default Named Pipe.
Database
Cluster Name If you select the Use Named Pipe Communication check box, the
Database Cluster Name parameter is displayed. If you are running
your SQL server in a cluster environment, define the cluster name
to ensure Named Pipe communication functions properly.
Table 39-2 McAfee ePO JDBC Parameters (continued)
Parameter Description