Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

Ambiron TrustWave IpAngel

 

The JSA DSM for Ambiron TrustWave ipAngel receives Snort-based events from the ipAngel console.

The following table identifies the specifications for the Ambiron TrustWave ipAngel DSM:

Table 1: Ambiron TrustWave IpAngel DSM Specifications

Specification

Value

Manufacturer

Ambiron

DSM name

Ambiron TrustWave ipAngel

RPM file name

DSM-AmbironTrustwaveIpAngel-

JSA_version-build_number.noarch.rpm

Supported versions

V4.0

Protocol

Syslog

Recorded event types

Snort-based events

Automatically discovered?

No

Includes identity?

No

Includes custom properties?

No

More information

Ambiron website (http://www.apache.org)

To send Ambiron TrustWave ipAngel events to JSA, complete the following steps:

  1. If automatic updates are not enabled, download and install the most recent version of the Ambiron TrustWave ipAngel DSM RPM on your JSA console.

  2. Configure your Ambiron TrustWave ipAngel device to forward your cache and access logs to JSA. For information on forwarding device logs to JSA, see your vendor documentation.

  3. Add an Ambiron TrustWave ipAngel log source on the JSA Console. The following table describes the parameters that require specific values that are required for Ambiron TrustWave ipAngel event collection:

    Table 2: Ambiron TrustWave IpAngel Log Source Parameters

    Parameter

    Value

    Log Source type

    Ambiron TrustWave ipAngel Intrusion Prevention System (IPS)

    Protocol Configuration

    Syslog