Forwarding Alerts To A Syslog Server - McAfee M-1250 - Network Security Platform Configuration Manual

McAfee® Network Security Platform 5.1
1
Modifying or deleting SNMP forwarder settings
To modify or delete SNMP Forwarder settings, do the following:
1
2
3

Forwarding alerts to a Syslog server

The
alerts to a Syslog Server. Syslog forwarding enables you to view the forwarded alerts from
Field
Customize Community
The following fields appear only when SNMP Version 3 is selected.
Authoritative Engine ID The authoritative (security) engineID used for SNMP version
3 REQUEST messages.
Authentication Level: This specifies the authentication level and has the following
categories:
•
•
•
The following fields appear only when Authorization, No Privileges or Authorization and
Privileges is selected in Authentication Level.
Authentication Type The authentication protocol (MD5 or SHA) used for
authenticating SNMP version 3 messages.
Authentication The authentication pass phrase used for authenticating
Password SNMP version 3 messages.
Encryption Type The privacy protocol (DES or AES) used for encrypting
SNMP version 3 messages.
Privacy Password The privacy pass phrase used for encrypting SNMP version 3
messages.
Click Apply. The SNMP server is added to the SNMP Forwarder List page.
IPS Settings > Alert Notification > SNMP
Select
Select the configured SNMP server instance from the
Do one of the following:
To edit the settings, click
a.
To delete the settings, click
b.
Alert Notification > Syslog
action enables the forwarding of Network Security Platform
Description
Define a customized SNMP community string, if there are
more than one SNMP communities in the network.
No Authorization, No Privileges: Uses a user name match for
authentication.
Authorization, No Privileges: Provides authentication based on
the MD5 or SHA algorithms
Authorization, Privileges: Provides authentication based on th
MD5 or SHA algorithms. It also provides encryption in add
to authentication based on the DES or AES standards.
.
Edit
, modify the fields as required, and then click
Delete
and then click
146
Managing IPS settings
SNMP Forwarder List
page.
Apply
OK
to confirm the deletion.
.