Enterasys Security Information and Event Manager, Configuration Manual

Page: 25 / 426

Configuring DSMs
4 A
MBIRON
T
RUST
W
AVE
ipA
NGEL
A SIEM Ambiron TrustWave ipAngel DSM accepts events using syslog. SIEM
records all Snort-based events from the ipAngel console.
Before you configure SIEM to integrate with ipAngel, you must forward your cache
and access logs to your SIEM system. For information on forwarding device logs to
SIEM, see your vendor documentation.
You are now ready to configure the log source in SIEM.
To configure SIEM to receive events from a ipAngle device:

From the Log Source Type drop-down list box, select the Ambiron
TrustWave ipAngel Intrusion Prevention System (IPS) option. For more
information on configuring log sources, see the Log Sources User Guide.