Enterasys Security Information and Event Manager, Configuration Manual

Page: 389 / 426

Configuring DSMs
Trend Micro Office Scan 373
c
Type the following message in the field:
Virus/Malware: %v
Spyware/Grayware: %T
Computer: %s
IP address: %i
Domain: %m
File: %p
Date/Time: %y
Result: %a
User name: %n
Step 4
Click Save .
You must now configure Outbreak Notifications. See Configuring Outbreak Criteria
and Alert Notifications .
Configuring
Outbreak Criteria and
Alert Notifications
To configure outbreak criteria and alert notifications:
Step 1
Select Notifications > Administrator Notifications > Outbreak Notifications .
Step 2
Click the Criteria tab.
Step 3
Type the number of detections and detection period for each security risk.
Notification messages are sent to an administrator when the criteria exceeds the
specified detection limit.
NOTE
Trend Micro recommends using the default values for the detection number and
detection period.
Step 4
Select Shared Folder Session Link and enable Office Scan to monitor for firewall
violations and shared folder sessions.
NOTE
To view computers on the network with shared folders or computers currently
browsing shared folders you can select the number link in the interface.
Step 5
Click the SNMP Trap tab.
a
Select the Enable notification via SNMP Trap check box.
b
Type the following message in the field:
Number of viruses/malware: %CV
Number of computers: %CC
Log Type Exceeded: %A
Number of firewall violation logs: %C
Number of shared folder sessions: %S
Time Period: %T
Step 6
Click Save.
Step 7
You are now ready to configure the log source in SIEM.