McAfee IntruShield Manager v6.1.1.14
- نسخه :Version 6.1.1.14
- نوع فایل : نرم افزار
- زبان : انگلیسی
- سیستم عامل : Windows 32Bit & 64Bit
- تولید کننده : McAfee
- سال تولید : 2009
Description
This article outlines the procedures for configuring McAfee IntruShield IPS to log to your LEM appliance, and configuring the IntruShield connector on your LEM appliance.
Environment
All LEM versions
Steps
To configure McAfee IntruShield IPS to log to your LEM appliance:
Open the IntruShield Manager console.
Click the Alert Notification tab, and then select Syslog Forwarder.
Select Yes next to Enable Syslog Forwarder.
Enter the IP address or hostname of your LEM appliance the appropriate Syslog Server field.
Enter 514 in the Port field.
Select Local user 0 (local0) from the Facilities list.
Complete the Severity Mapping section as follows:
Informational to: Select Informational: informational messages.
Low to: Select Notice: normal but significant condition.
Medium to: Select Critical: critical conditions.
High to: Select Alert: action must be taken immediately.
Select Informational and above from the With severity list in the Forward Alerts section.
Click Apply.
Select Customized in the Message Preference section, and then click Edit.
Environment
All LEM versions
Steps
To configure McAfee IntruShield IPS to log to your LEM appliance:
Open the IntruShield Manager console.
Click the Alert Notification tab, and then select Syslog Forwarder.
Select Yes next to Enable Syslog Forwarder.
Enter the IP address or hostname of your LEM appliance the appropriate Syslog Server field.
Enter 514 in the Port field.
Select Local user 0 (local0) from the Facilities list.
Complete the Severity Mapping section as follows:
Informational to: Select Informational: informational messages.
Low to: Select Notice: normal but significant condition.
Medium to: Select Critical: critical conditions.
High to: Select Alert: action must be taken immediately.
Select Informational and above from the With severity list in the Forward Alerts section.
Click Apply.
Select Customized in the Message Preference section, and then click Edit.
