Enterasys Security Information and Event Manager, Configuration Manual

Page: 229 / 426

Configuring DSMs
Microsoft IAS Server
213

From the Log Source Type drop-down list box, select the Microsoft
Exchange Server option, or configure the Adaptive Log Exporter.
For information about the Adaptive Log Exporter, see the Adaptive Log Exporter
Users Guide .
For information about the Microsoft Exchange Protocol, see the Log Sources User
Guide .
For more information about your Microsoft Exchange Server, see your vendor
documentation.
Microsoft IAS
Server
A SIEM Microsoft IAS Server DSM accepts RADIUS events using syslog. You can
integrate Internet Authentication Service (IAS) or Network Policy Server (NPS)
logs with SIEM using the SIEM Adaptive Log Exporter. For more information, see
the
Adaptive Log Exporter Users Guide .
You are now ready to configure the log source in SIEM.
To configure SIEM to receive events from a Microsoft Windows IAS Server:

From the Log Source Type drop-down list box, select the Microsoft IAS
Server option.
For more information on configuring devices, see the Log Sources User Guide .
For more information about your server, see your vendor documentation.
Microsoft DHCP
Server
A SIEM Microsoft DHCP Server DSM accepts DHCP events using the Microsoft
DHCP Server protocol or the Adaptive Log Exporter. Before configuring your
Microsoft DHCP Server in SIEM, you must configure your Microsoft DHCP Server
to enable audit logging.
To configure the Microsoft DHCP Server, you must:
Step 1
Log in to the DHCP Server Administration Tool.
Step 2
From the DHCP Administration Tool, right-click on the DHCP server and select
Properties .
The Properties window is displayed.
Step 3
Click the General tab.
The General panel is displayed.
Step 4
Click Enable DHCP Audit Logging .
The audit log file is created at midnight and must contain a three-character day of
the week abbreviation.