Configuring DSMs
71
T
OP
L
AYER
IPS
A SIEM Top Layer IPS DSM accepts Top Layer IPS events using syslog. SIEM
records and processes Top Layer events. Before you configure SIEM to integrate
with a Top Layer device, you must configure syslog within your Top Layer IPS
device. For more information on configuring Top Layer, see your Top Layer
documentation.
Once you configure syslog to forward events to SIEM, you are ready to configure
the log source SIEM.
To configure SIEM to receive events from a Top Layer IPS device:
From the
Log Source Type
drop-down list box, select the
Top Layer
Intrusion Prevention System (IPS)
option.
For more information on configuring log sources, see the
Log Sources User Guide
.
For more information about your Top Layer device, see your vendor
documentation.
Summary of Contents for Security Information and Event Manager
Page 2: ......
Page 8: ......
Page 20: ......
Page 22: ......
Page 24: ......
Page 26: ......
Page 32: ......
Page 34: ......
Page 36: ......
Page 38: ......
Page 44: ......
Page 58: ......
Page 90: ......
Page 92: ......
Page 94: ......
Page 114: ......
Page 116: ......
Page 122: ......
Page 124: ......
Page 126: ...Configuring DSMs 110 FIREEYE...
Page 128: ......
Page 130: ......
Page 132: ......
Page 136: ......
Page 140: ......
Page 144: ......
Page 172: ......
Page 176: ...Configuring DSMs 160 ISC BIND...
Page 180: ......
Page 182: ......
Page 184: ......
Page 204: ......
Page 224: ......
Page 246: ......
Page 250: ......
Page 256: ......
Page 260: ......
Page 276: ......
Page 282: ......
Page 284: ......
Page 306: ......
Page 308: ......
Page 318: ......
Page 322: ......
Page 324: ......
Page 346: ......
Page 356: ......
Page 366: ......
Page 384: ......
Page 392: ......
Page 394: ......
Page 396: ......
Page 398: ......
Page 404: ......
Page 426: ......