Enterasys Security Information and Event Manager, Configuration Manual

Page: 333 / 426

Configuring DSMs
Sophos PureMessage 317
Step 6
From the Log Source Type drop-down list box, select Sophos PureMessage .
Step 7
From the Protocol Configuration drop-down list box, select JDBC .
NOTE
You must refer to the database configuration settings on your Sophos
PureMessage device to define the parameters required to configure the Sophos
PureMessage DSM in SIEM.
Step 8
Configure the following values:
Table 61-1 Sophos PureMessage JDBC Parameters
Parameter Description
Log Source
Identifier Type the identifier for the log source. Type the log source identifier
in the following format:
<Sophos PureMessage Database>@<Sophos PureMessage
Database Server IP or Host Name>
Where:
<Sophos PureMessage Database>
is the database name, as
entered in the Database Name parameter.
<Sophos PureMessage Database Server IP or Host
Name>
is the hostname or IP address for this log source, as
entered in the IP or Hostname parameter.
When defining a name for your log source identifier, you must use
the values of the Database and Database Server IP address or
hostname of the Sophos PureMessage device.
Database Type From the drop-down list box, select MSDE .
Database Name Type
savexquar
.
IP or Hostname Type the IP address or host name of the Sophos PureMessage
server.
Port Type the port number used by the database server. The default
port for MSDE is 1433. Sophos installations typically use 24033.
You can confirm port usage using the SQL Server Configuration
Manager utility. For more information, see your vendor
documentation.
The JDBC configuration port must match the listener port of the
Sophos database. The Sophos database must have incoming TCP
connections enabled to communicate with SIEM.
Note: If you define a database instance in the Database Instance
parameter, you must leave the Port parameter blank. You can only
define a database instance if the database server uses the default
port of 1433. This is not the standard Sophos configuration.
Username Type the username required to access the database.
Password Type the password required to access the database. The
password can be up to 255 characters in length.