20
Enterasys Dragon
Creating an Alarm
Tool Policy Using an
SNMPv3 Notification
Rule
E
NTERASYS
This section provides information on the following DSMs:
Enterasys Dragon
•
Enterasys HiGuard Wireless IPS
•
•
Enterasys HiPath Wireless Controller
•
Enterasys Stackable and Standalone Switches
Enterasys XSR Security Router
•
Enterasys Matrix Router
•
Enterasys NetSight Automatic Security Manager
•
Enterasys Matrix K/N/S Series Switch
•
Enterasys NAC
•
A SIEM Enterasys Dragon DSM accepts Enterasys events using either syslog or
SNMPv3. SIEM records all relevant Enterasys Dragon events. Before you
configure SIEM to integrate with Enterasys Dragon, you must create an Alarm Tool
policy using either an SNMPv3 or Syslog notification rule.
To configure your SIEM Enterasys Dragon DSM, you must:
Choose one of the following:
1
Create an Alarm Tool policy using an SNMPv3 notification rule. See
a
Alarm Tool Policy Using an SNMPv3 Notification
Create an Alarm Tool policy using a Syslog notification rule. See
b
Policy with a Syslog Notification
Configure the log source within SIEM. See
2
Configure Dragon Enterprise Management Server (EMS) to forward syslog
3
messages. See
Configuring the EMS to Forward Syslog Messages to SIEM
This procedure describes how to configure an Alarm Tool policy using an SNMPv3
notification rule. Use SNMPv3 notification rules if you need to transfer PDATA
binary data elements.
Rule.
Configuring DSMs
Rule.
Configuring
SIEM.
Creating an
Creating a