Symantec 10744983 - Mail Security 8320, Administration Manual

Page: 223 / 249

Note: Although some of the Information Manager Event IDs are the same for
multiple events, the event descriptions and occasionally the severity is different.
Configuring data sources
You must configure the following data sources on the Information Manager to
receive events from Symantec Mail Security for SMTP. You can add a new sensor
for each data source. Once you have configured these sources, you must distribute
the configuration to the Collector for it to take effect. For more information, refer
to the Symantec Security Information Manager documentation.
Table A-1 describes the settings for Message statistics.
Table A-1
Settings for Message statistics
Value Setting
Message stats Type:
/opt/Symantec/SMSSMTP/scanner/stats/ Path for Linux/Solaris:
c:\Program Files\Symantec\SMSSMTP\scanner\stats\ Path for Windows:
bmi_eng_stats Filename:
Monitor in Real Time Configure as:
Table A-2 describes the settings for Firewall statistics.
Table A-2
Settings for Firewall statistics
Value Setting
Firewall stats Type:
/opt/Symantec/SMSSMTP/scanner/stats/ Path for Linux/Solaris:
c:\Program Files\Symantec\SMSSMTP\scanner\stats\ Path for Windows:
bmi_fw_stats Filename:
Monitor in Real Time Configure as:
Table A-3 describes the settings for Administrative and Definition Update
statistics.
223 Integrating Symantec Mail Security with Symantec Security Information Manager
Interpreting events in the Information Manager