TippingPoint X505/X506 Device
The TippingPoint X505/X506 DSM for JSA accepts events by using syslog.
JSA records all relevant system, audit, VPN, and firewall session events.
Configure your TippingPoint X506/X506 device to communicate with Syslog
To retrieve events in JSA, you must configure your TippingPoint X505/X506 device to forward events to JSA.
- Log in to your TippingPoint X505/X506 device.
- From the LSM menu, select System >Configuration
The Syslog Servers window is displayed.
- For each log type you want to forward, select a check
box and type the IP address of your JSA.
If your JSA is in a different subnet than your TippingPoint device, you might have to add static routes. For more information, see your vendor documentation.
You are now ready to configure the log source in JSA.
- To configure JSA to receive events from a TippingPoint X505/X506
device: From the Log Source Type list, select the TippingPoint X Series Appliances option.
If you have a previously configured TippingPoint X505/X506 DSM installed and configured on your JSA, the TippingPoint X Series Appliances option is still displayed in the Log Source Type list. However, for any new TippingPoint X505/X506 DSM that you configure, you must select the TippingPoint Intrusion Prevention System (IPS) option.