Microsoft DHCP Server
The Microsoft DHCP Server DSM for JSA accepts DHCP events by using the Microsoft DHCP Server protocol or WinCollect.
Before you can integrate your Microsoft DHCP Server with JSA, you must enable audit logging.
To configure the Microsoft DHCP Server:
- Log in to the DHCP Server Administration Tool.
- From the DHCP Administration Tool, right-click on the
DHCP server and select Properties.
The Properties window is displayed.
- Click the General tab.
The General pane is displayed.
- Click Enable DHCP Audit Logging.
The audit log file is created at midnight and must contain a three-character day of the week abbreviation.
Table 1: Microsoft DHCP Log File Examples
By default Microsoft DHCP is configured to write audit logs to the
- Restart the DHCP service.
- You can now configure the log source and protocol in JSA.
To configure JSA to receive events from a Microsoft DHCP Server, you must select the Microsoft DHCP Server option from the Log Source Type list.
To configure the protocol, you must select the Microsoft DHCP option from the Protocol Configuration list.
To integrate Microsoft DHCP Server versions 2000/2003 with JSA by using WinCollect, see the Juniper Secure Analytics WinCollect User Guide.