Enterasys Security Information and Event Manager, Configuration Manual

Page: 68 / 426

Configuring DSMs
52 C
HECK
P
OINT
The name you type must be different than the name used in Step 2 .
Step 7
From the Host drop-down menu, select the SIEM host object that you just created.
Step 8
From Application Properties , select User Defined as the Vendor type.
Step 9
From Client Entries , select LEA .
Step 10
Configure the Secure Internal Communication (SIC) certificate, click
Communication and enter an activation key.
Step 11
Select OK and then Close .
Step 12
To install the Policy on your firewall, select Policy > Install > OK .
Configuring the Check Point Log Source
To configure SIEM to receive events from a Check Point Provider-1 device:
Step 1
From the Log Source Type drop-down list box, select Check Point Firewall-1 .
Step 2
From the Protocol Configuration drop-down list box, select OPSEC/LEA .
For more information on configuring OPSEC/LEA, see the Log Sources User
Guide .