Enterasys Security Information and Event Manager, Руководство по настройке

Страница: 217 / 426

Configuring DSMs
McAfee Application / Change Control 201
Table 39-4 McAfee Application / Change Control JDBC Parameters
Parameter Description
Log Source
Identifier Type the identifier for the log source. Type the log source identifier
in the following format:
<McAfee Change Control Database>@<Change Control
Database Server IP or Host Name>
Where:
<McAfee Change Control Database>
is the database name,
as entered in the Database Name parameter.
<Change Control Database Server IP or Host Name>
is the hostname or IP address for this log source, as entered in the
IP or Hostname parameter.
When defining a name for your log source identifier, you must use
the values of the McAfee Change Control Database and Database
Server IP address or hostname from the ePO Management
Console.
Database Type From the drop-down list box, select MSDE .
Database Name Type the exact name of the McAfee Application / Change Control
database.
IP or Hostname Type the IP address or host name of the McAfee Application /
Change Control SQL Server.
Port Type the port number used by the database server. The default
port for MSDE is 1433.
The JDBC configuration port must match the listener port of the
McAfee Application / Change Control database. The McAfee
Application / Change Control database must have incoming TCP
connections enabled to communicate with SIEM.
Note: If you define a Database Instance when using MSDE as the
database type, you must leave the Port parameter blank in your
SIEM configuration.
Username Type the username required to access the database.
Password Type the password required to access the database. The
password can be up to 255 characters in length.
Confirm
Password Confirm the password required to access the database. The
confirmation password must be identical to the password entered
in the Password parameter.
Authentication
Domain If you select MSDE as the Database Type and the database is
configured for Windows, you must define the Window
Authentication Domain. Otherwise, leave this field blank.
Database
Instance Optional. Type the database instance, if you have multiple SQL
server instances on your database server.
Note: If you use a non-standard port in your database
configuration, or have blocked access to port 1434 for SQL
database resolution, you must leave the Database Instance
parameter blank in your SIEM configuration.