Cisco Nac Device - Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 - CONFIGURING DSMS REV 1 Manual

17
Step 5
Step 6
Step 7
Step 8
Step 9
Step 10
Step 11
C NAC D
ISCO
A STRM Cisco NAC DSM accepts events using syslog. STRM records all relevant
audit, error, and failure events as well as quarantine and infected system events.
Before configuring a Cisco NAC device in STRM, you must configure your device
to send syslog events to STRM.
To configure the device to send syslog events to STRM:
Log in to the Cisco NAC interface.
In the Monitoring section, select Event Logs.
Click the Syslog Settings tab.
In the Syslog Server Address field, enter the IP address of your STRM system.
In the Syslog Server Port field, enter the syslog port. The default is 512.
In the System Health Log Interval field, enter the frequency, in minutes, for
system statistic log events.
Click Update.
You are now ready to configure the sensor device within the STRM interface. To
configure STRM to receive events from a Cisco NAC device, you must select the
Cisco NAC option from the Sensor Device Type drop-down list box. For more
information on configuring sensor devices, see the Managing Sensor Devices
Guide.
Configuring DSMs Guide
EVICE