Enterasys Security Information and Event Manager, Configuration Manual

Page: 99 / 426

Configuring DSMs
20 E
NTERASYS
This section provides information on the following DSMs:
• Enterasys Dragon
•
Enterasys HiGuard Wireless IPS
•
Enterasys HiPath Wireless Controller
• Enterasys Stackable and Standalone Switches
• Enterasys XSR Security Router
•
Enterasys Matrix Router
•
Enterasys NetSight Automatic Security Manager
• Enterasys Matrix K/N/S Series Switch
• Enterasys NAC
Enterasys Dragon
A SIEM Enterasys Dragon DSM accepts Enterasys events using either syslog or
SNMPv3. SIEM records all relevant Enterasys Dragon events. Before you
configure SIEM to integrate with Enterasys Dragon, you must create an Alarm Tool
policy using either an SNMPv3 or Syslog notification rule.
To configure your SIEM Enterasys Dragon DSM, you must:
1
Choose one of the following:
a
Create an Alarm Tool policy using an SNMPv3 notification rule. See Creating an
Alarm Tool Policy Using an SNMPv3 Notification Rule .
b
Create an Alarm Tool policy using a Syslog notification rule. See Creating a
Policy with a Syslog Notification Rule .
2
Configure the log source within SIEM. See Configuring SIEM .
3
Configure Dragon Enterprise Management Server (EMS) to forward syslog
messages. See
Configuring the EMS to Forward Syslog Messages to SIEM
Creating an Alarm
Tool Policy Using an
SNMPv3 Notification
Rule
This procedure describes how to configure an Alarm Tool policy using an SNMPv3
notification rule. Use SNMPv3 notification rules if you need to transfer PDATA
binary data elements.