Enterasys Security Information and Event Manager, Configuration Manual

Page: 314 / 426

Configuring DSMs
298 RSA A
UTHENTICATION
M
ANAGER
You are now ready to configure the log sources and protocol within SIEM:
Step 1
To configure SIEM to receive events from a RSA device, you must select the RSA
Authentication Manager option from the Log Source Type drop-down list box.
Step 2
To configure the log file protocol, you must select the Log File option from the
Protocol Configuration drop-down list box.
For more information on configuring log sources and protocols, see the Log
Sources User Guide .
Configuring RSA Authentication Manager 6.x
To configure your RSA Authentication Manager v6.x device:
Step 1
Log in to the RSA Security Console.
Step 2
Log in to the RSA Database Administration tool:
a
Click the Advanced tool.
The system prompts you to login again.
b
Click Database Administration .
For complete information on using SecurID, see your vendor documentation.
Step 3
From the Log drop-down list box, select Automate Log Maintenance .
The Automatic Log Maintenance window is displayed.
Step 4
Select the Enable Automatic Audit Log Maintenance check box.
Step 5
Select Delete and Archive .
Step 6
Select Replace files .
Step 7
Type an archive filename.
Step 8
In the Cycle Through Version(s) field, type a value.
For example, 1.
Step 9
Select Select all Logs .
Step 10
Select a frequency.
Step 11
Click OK .
You are now ready to configure the log sources and protocol in SIEM:
Step 1
To configure SIEM to receive events from a RSA device, you must select the RSA
Authentication Manager option from the Log Source Type drop-down list box.
Step 2
To configure the log file protocol, you must select the Log File option from the
Protocol Configuration drop-down list box.
For more information on configuring log sources and protocols, see the Log
Sources User Guide .