Enterasys Security Information and Event Manager, Configuration Manual

Page: 93 / 426

Configuring DSMs
18 C
YBER
G
UARD
F
IREWALL
/VPN
A
PPLIANCE
A SIEM CyberGuard Firewall VPN Appliance DSM accepts CyberGuard events
using syslog. SIEM records all relevant CyberGuard events. SIEM supports the
CyberGuard KS series of appliances.
Before you configure SIEM to integrate with a CyberGuard device, you must:
Step 1
Log in to the CyberGuard user interface.
Step 2
Select the Advanced page.
Step 3
Under System Log , select Enable Remote Logging .
Step 4
Type the IP address of SIEM.
Step 5
Click Apply .
Step 6
You are now ready to configure the log source in SIEM.
To configure SIEM to receive events from a CyberGuard Firewall VPN device:

From the Log Source Type drop-down list box, select the CyberGuard TSP
Firewall/VPN option.
For more information on configuring log sources, see the Log Sources User Guide .
For more information on configuring your CyberGuard device, consult your
CyberGuard documentation.