Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 494 / 861

493 Monitoring the security gateway
Alerting using notifications
Configuring an SNMP2 notification
SNMPv2 notifications contain object identifier (OID) values that represent the source and destination
parties and trap context. An OID is a sequence of integers separated by periods, such as 1.3.1.6.1.4. You
can use different privacy methods to hide the information in the trap as it crosses the network, and
different authentication methods to ensure the identity of the trap originator.
The security gateway supports only unauthenticated, non-private traps. However, the manager and
security gateway must still agree upon values for the source and destination parties and the trap
context.
You can assign an OID to represent the security gateway (the source party) and tell you the OID that
represents the management station (the destination party).
The administrator should also assign an OID value for the trap context. The trap context must include
both Internet-defined MIB variables and security gateway-defined MIB variables. The snmpv2.mib file
provides the administrator with enough information to do this.
Prerequisites
None.
To configure an SNMP V2 notification
1 In the SGMI, in the left pane, under Monitors, click Notifications .
2 In the right pane, on the Notifications tab, click New > SNMP V2 Trap Notification .
3 In the SNMP V2 Trap Notification Properties dialog box, on the General Tab, to enable the new
notification through SNMP V2 trap, check
Enable .
4
In the Notification Name text box, type a name for the notification.
5 Optionally, in the Time Period drop-down list, you can select a time period in which the notification
will be valid.
6 To define the severity of the alerts necessary to trigger the notification, check the appropriate
Triggered by Event options.
7 In the Context text box, type the OID value provided by your network administrator.
8 In the Destination Party text box, type the destination party OID provided by the SNMP
administrator.
9 In the Host Address text box, type the IP address of the SNMP host.
10
In the Port text box, type the port number provided by the SNMP system administrator.
11 In the Source Party text box, type the source party OID provided by the SNMP administrator.
12
In the Caption text box, type a brief description of the notification.
13 Optionally, on the Description tab, type a more detailed description than you typed in the Caption
text box.
14
Click OK .
15 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
16 If you set the security level for triggering a notification to Alert, you can use the Alert Threshold
tab in the Rule Properties dialog box to control when alert events are logged.