Enterasys Security Information and Event Manager, Руководство по настройке

Страница: 201 / 426

Configuring DSMs
Juniper Networks vGW Virtual Gateway 185
Configuring Juniper
Steel-Belted Radius
for Syslog
To integrate a Juniper Steel-Belted Radius DSM with SIEM using syslog on a
Linux-based operating system:
Step 1
Using SSH log in to your Juniper Steel-Belted Radius device, as a root user.
Step 2
Edit the following file:
/etc/syslog.conf
Step 3
Add the following information:
<facility>.<priority> @<IP address>
Where:
<facility>
is the syslog facility, for example,
local3
.
<priority> is the syslog priority, for example,
info
.
<IP address>
is the IP address of SIEM.
Step 4
Save the file.
Step 5
From the command line, type the following command to restart syslog:
service syslog restart
Step 6
You are now ready to configure the log source in SIEM.
To configure SIEM to receive events from Juniper Steel-Belted Radius:

From the Log Source Type drop-down list box, select the Juniper Steel
Belted Radius option.
For more information on configuring log sources, see the Log Sources User Guide.
For more information on configuring your Steel-Belted Radius server consult your
vendor documentation.
Juniper Networks
vGW Virtual
Gateway
A SIEM Juniper Networks vGW Virtual Gateway DSM accepts events using syslog
and NetFlow from your vGW management server or firewall. SIEM records all
relevant events, such as admin, policy, IDS logs, and firewall events. Before
configuring an Juniper Networks vGW Virtual Gateway in SIEM, you must
configure vGW to send events to SIEM.
To integrate SIEM with a Juniper Networks vGW Virtual Gateway:
Step 1
Log in to your Juniper Networks vGW user interface.
Step 2
Select Settings .
Step 3
From Security Settings , select Global .
Step 4
From External Logging , select one of the following:
•
Send Syslog from vGW management server - Central logging with syslog
event provided from a management server.