Enterasys Security Information and Event Manager, Configuration Manual

Page: 227 / 426

Configuring DSMs
Microsoft Exchange Server
211
Step 7
From the list of properties, select all properties that you want to apply to the
Microsoft Exchange Server DSM. The selected properties must include the
following:
a
Select the Method (cs-method) check box.
b
Select the Protocol Version (cs-version) check box.
Step 8
Click OK .
Step 9
You are now ready to configure SIEM to receive events from a Microsoft Exchange
Server.
To configure SIEM to receive events from the Microsoft Exchange Server:

From the Log Source Type drop-down list box,select the Microsoft
Exchange Server option or configure the Adaptive Log Exporter.
For information about the Adaptive Log Exporter, see the Adaptive Log Exporter
Users Guide .
For information about the Microsoft Exchange Protocol, see the Log Sources User
Guide .
For more information about your Microsoft Exchange Server, see your vendor
documentation.
Integrating with SIEM
Using OWA and IIS
7.0
To integrate SIEM with the Microsoft Exchange Server DSM:
Step 1
In the IIS 7.0 Manager menu tree, expand Local Computer .
Step 2
Click Logging .
The Logging window is displayed.
Step 3
From the Format drop-down list box, choose one of the following options:
•
Select NCSA . Go to Step 6 .
•
Select IIS . Go to Step 6 .
• Select W3C . Go to Step 4 .
Step 4
Click Select Fields .
The W3C Logging Fields window is displayed.
Step 5
From the list of properties, select all properties that you wish to apply to the
Microsoft Exchange Server DSM. The selected properties must include the
following:
a
Select the Method (cs-method) check box.
b
Select the Protocol Version (cs-version) check box.
Step 6
Click OK .