Table of Contents
Advertisement
64
Integrating Symantec Mail Security with Symantec Security Information Manager
Installing and configuring event logging to the Information Manager
Configuring the Information Manager
Installing the local SSIM Agent
Configure the Information
Manager to recognize
Symantec Mail Security for
SMTP
Install a local SSIM Agent
and Collector on the
computer that is running
Symantec Mail Security for
SMTP
Configure data sources in the
Information Manager Web
interface
The Symantec Security Information Manager Web configuration interface provides
a link that you can use to download and install the SIP Integration Wizard. The
wizard installs SSIM Integration Packages (SIPs) for Symantec Mail Security for
SMTP. The SIP contains the configuration settings and event schemas that the
Information Manager requires to recognize and log events from Symantec Mail
Security for SMTP.
You must run the SIP Integration Wizard for each Symantec Security Information
Manager to which you are forwarding events from Symantec Mail Security for
SMTP.
The local SSIM Agent handles the communication between Symantec Mail Security
and the Information Manager and is installed on the same computer that is running
Symantec Mail Security. The local SSIM Agent is provided as part of the software
distribution package for Symantec Mail Security for SMTP.
When you have more than one SSIM-enabled product installed on a single
computer, these products can share a local SSIM Agent. However, each product
must register with the SSIM Agent. Thus, even if a SSIM Agent has already been
installed on the computer for another SSIM-enabled security product, you must
run the installer to register Symantec Mail Security for SMTP.
For the Information Manager to receive events from
Symantec Mail Security for SMTP, you must run the SIP
Integration Wizard that is specific to Symantec Mail Security
for SMTP. The SIP Integration Wizard installs the
appropriate integration components for identifying the
individual security product (in this case, Symantec Mail
Security for SMTP) to the Information Manager.
See
"Configuring the Information Manager"
The local SSIM Agent and Collector handles the
communication between Symantec Mail Security and the
Information Manager.
See
"Installing the local SSIM Agent "
"Installing the Collector"
These are the events that the Information Manager will
receive and display. You must provide this information so
that the Information Manager knows where to look for the
event data.
on page 64.
on page 64. and See
on page 66..
Advertisement
Table of Contents
