Juniper Networks IDP

The Juniper IDP DSM for JSA accepts events using syslog. JSA records all relevant Juniper IDP events.

You can configure a sensor on your Juniper IDP to send logs to a syslog server:

1. Log in to the Juniper NSM user interface.
2. In NSM, double-click on the Sensor in Device Manager.
3. Select Global Settings.
4. Select Enable Syslog.
5. Type the Syslog Server IP address to forward events to JSA.
6. Click OK.
7. Use Update Device to load the new settings onto the IDP Sensor.

   The format of the syslog message sent by the IDP Sensor is as follows:

   See the following syslog example:

Configure a Log Source

Juniper NSM is a central management server for Juniper IDP. You can configure JSA to collect and represent the Juniper IDP alerts as coming from a central NSM, or JSA can collect syslog from the individual Juniper IDP device.

To configure JSA to receive events from Juniper Networks Secure Access device:

From the Log Source Type list, select Juniper Networks Intrusion Detection and Prevention (IDP)For more information about Juniper IDP, see your Network and Security Manager documentation.