Symantec 360R - Security Gateway SGS Administration Manual page 122

122 Logging, monitoring and updates
Managing logging
SNMP v1 MIBS (information variables) using GETs. A TRAP collects status
information set from Symantec Gateway Security 300 Series appliance to the
SNMP server.
Configuring SNMP sets the IP addresses of the SNMP servers to receive status
information (TRAPS) alerts from the SNMP agent running on the appliance.
This feature provides minimal protection over a public network. Therefore for
highest security, remote access administration should be done through a VPN
tunnel.
To monitor the appliance on the LAN side, browse to the appliance's LAN IP
address (by default, 192.168.0.1) using an SNMP v1 MIB browser. To allow
external access to SNMP GET on the appliance, check Enable Remote
Monitoring.
To configure SNMP
There are two parts to configuring SNMP:
Configuring SNMP
■
Verifying communication between the SNMP server and the Symantec
■
Gateway Security 300 Series appliance.
Before you begin configuring SNMP, collect the following information:
For TRAPs, you must have SNMP v 1.0 servers or applications running on
■
your network to receive the network event alert messages and you need the
SNMP server IP addresses to configure SNMP on the appliance.
You also need the community string for the SNMP server. The SNMP server
■
IP address and community string should be available from the administrator
running the SNMP server.
You can configure SNMP at anytime after the appliance is installed and the
■
SNMP servers are running.
See "Administration field descriptions"
To configure SNMP
1 In the left pane, click Administration.
2 In the right pane, on the SNMP tab, under SNMP Read-only Managers (GETS
and TRAPS), in the Community String text box, type the name of the
community.
The default is Public.
3
In the IP Address text boxes, type the IP addresses of the SNMP read-only
managers (for TRAP collection only).
4 Click Save.
on page 157.