Enterasys Security Information and Event Manager, Руководство по настройке

Страница: 107 / 426

Configuring DSMs
Enterasys HiPath Wireless Controller 91
• Port Number - Type the port number of the syslog server to which HWMH
sends events. The default is 514.
• Message Format - Select Plain Text as the format for sending events.
• Enabled? - Select if the events are to be sent to this syslog server.
Step 6
Save your configuration.
Step 7
You are now ready to configure the log source in SIEM.
To configure SIEM to receive events from the Enterasys HiGuard Wireless IPS
device:

From the Log Source Type drop-down list box, select the Enterasys
HiGuard option.
For more information on configuring log sources, see the Log Sources User Guide .
For more information about your Enterasys HiGuard Wireless IPS device, see your
vendor documentation.
Enterasys HiPath
Wireless Controller
The Enterasys HiPath Wireless Controller DSM accepts events using syslog.
SIEM records all relevant events. Before configuring the Enterasys HiPath
Wireless Controller device in SIEM, you must configure your device to send syslog
events to SIEM.
To configure the device to send syslog events to SIEM:
Step 1
Log in to the HiPath Wireless Assistant.
Step 2
Click Wireless Controller Configuration .
The HiPath Wireless Controller Configuration window is displayed.
Step 3
From the menu, click System Maintenance .
Step 4
From the Syslog section, select the Syslog Server IP check box and type the IP
address of the device receiving the syslog messages.
Step 5
Using the Wireless Controller Log Level drop-down list box, select Information .
Step 6
Using the Wireless AP Log Level drop-down list box, select Major .
Step 7
Using the Application Logs drop-down list box, select local.0 .
Step 8
Using the Service Logs drop-down list box, select local.3 .
Step 9
Using the Audit Logs drop-down list box, select local.6 .
Step 10
Click Apply .
Step 11
You are now ready to configure the log source in SIEM.