Cisco Csa - Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 - CONFIGURING DSMS REV 1 Manual

14
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Step 7
Step 8
Step 9
Step 10
C CSA
ISCO
You can integrate a Cisco Security Agent (CSA) server with STRM. A CSA DSM
accepts events using syslog, and SNMPv2. You can integrate CSA versions 4.x
and 5.x with STRM. STRM records all relevant events.
Before you configure STRM to integrate with a CSA server, you must:
Open the CSA interface and select Security Agents.
Click the Monitor tab.
Click Alerts.
From the bottom of the window, select New.
Enter a name in the Name field and optional description in the description field.
Select the SNMP check box.
Enter a Community name (configured on STRM).
Enter the Manager IP address (STRM deployment).
From the drop-down list box, select the events on which you wish to alert.
Click Save.
You are now ready to configure the sensor device and SNMP within the STRM
interface. For information on configuring SNMP in the STRM interface, see the
Managing Sensor Devices Guide. To configure STRM to receive events from a
Cisco CSA device, choose one of the following options:
If you are using STRM 6.0, select Cisco CSA from the Sensor Device Type
•
drop-down list box.
If you are using STRM 6.0.1 and above, select Cisco Security Agent (CSA)
•
from the Sensor Device Type drop-down list box.
For more information on configuring sensor devices, see the Managing Sensor
Devices Guide.
Configuring DSMs Guide