Microsoft Dhcp Server - Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 - CONFIGURING DSMS REV 1 Manual

49
Step 1
Step 2
Step 3
Step 4
Step 5
M
ICROSOFT
A STRM Microsoft DHCP Server DSM accepts DHCP events using the STRM
Adaptive Log Exporter. You can integrate Windows DHCP Server versions
2000/2003 with STRM using the Adaptive Log Exporter Windows DHCP devices.
For more information on the Adaptive Log Exporter, see the STRM Adaptive Log
Exporter Users Guide.
To configure the Microsoft DHCP Server to send syslog to STRM:
Log in to the DHCP Server Administration Tool.
From the DHCP Administration Tool, use the right-mouse button (right-click) on the
DHCP server and select Properties.
The Properties window appears.
Click the General tab.
The General panel appears.
Click Enable DHCP Audit Logging.
The log file %WINDIR%\system32\dhcp\DhcpSrvLog-xxx.log is created.
Restart the DHCP service.
To integrate Windows DHCP Server versions 2000/2003 with STRM using the
Adaptive Log Exporter Windows DHCP devices, see the STRM Adaptive Log
Exporter Users Guide.
To configure STRM to receive events from a Microsoft Windows DHCP Server, you
must select the Microsoft DHCP Server option from the Sensor Device Type
drop-down list box. For more information on configuring devices, see the
Managing Sensor Devices Guide.
For more information regarding your server, see your vendor documentation.
Configuring DSMs Guide
DHCP S
ERVER