Enterasys Security Information and Event Manager, Configuration Manual

Page: 69 / 426

Configuring DSMs
14 C
ISCO
This section provides information on the following DSMs:
• Cisco ACE Firewall
•
Cisco Aironet
•
Cisco ACS
• Cisco ASA
• Cisco CatOS for Catalyst Switches
•
Cisco CSA
•
Cisco FWSM
• Cisco IDS/IPS
• Cisco IronPort
•
Cisco NAC
•
Cisco IOS
•
Cisco Pix
• Cisco VPN 3000 Concentrator
•
Cisco Wireless Services Module
Cisco ACE Firewall
You can integrate a Cisco ACE firewall with SIEM. A Cisco ACE firewall DSM
accepts events using syslog. SIEM records all relevant events. Before you
configure SIEM to integrate with an ACE firewall, you must forward all device logs
to your SIEM system.
To forward Cisco ACE device logs to SIEM:
Step 1
Log in to your Cisco ACE device.
Step 2
From the shell interface, select Main Menu > Advanced Options > Syslog
Configuration .
Step 3
The Syslog Configuration menu varies depending on whether there are any syslog
destination hosts configured yet. If no syslog destinations have been added, create
one by selecting the
Add First Server option. Click OK .