Enterasys Security Information and Event Manager, Configuration Manual

Page: 385 / 426

Configuring DSMs
72 T
REND
M
ICRO
This section provides information on the following DSMs:
• Trend Micro InterScan VirusWall
•
Trend Micro Control Manager
•
Trend Micro Office Scan
Trend Micro
InterScan VirusWall
A SIEM Trend Micro InterScan VirusWall DSM accepts events using syslog. You
can integrate InterScan VirusWall logs with SIEM using the SIEM Adaptive Log
Exporter. For more information on the Adaptive Log Exporter, see the
Adaptive
Log Exporter Users Guide .
You are now ready to configure the log source in SIEM.
To configure SIEM to receive events from an InterScan VirusWall device:

From the Log Source Type drop-down list box, select the Trend InterScan
VirusWall option.
For more information on configuring devices, see the Log Sources User Guide .
For more information about your Trend Micro InterScan VirusWall device, see your
vendor documentation.
Trend Micro
Control Manager
You can integrate a Trend Micro Control Manager device with SIEM. A Trend Micro
Control Manager accepts events using SNMPv1, SNMPv2 or SNMPv3. Before you
configure SIEM to integrate with a Trend Micro Control Manager device, you must:
Step 1
Log in to the Trend Micro Control Manager device.
Step 2
Select Administration > Settings > Event Center Settings .
Step 3
Set the SNMP trap notifications:
a
In the SNMP Trap Settings field, type the Community Name.
b
Type the SIEM server IP address.
Step 4
Click Save .