Trend Micro Control Manager
You can integrate a Trend Micro Control Manager device with JSA.
Trend Micro Control Manager accepts events using SNMPv1, SNMPv2 and SNMPv3. Before you configure JSA to integrate with a Trend Micro Control Manager device, you must configure a log source, then configure SNMP trap settings for your Trend Micro Control Manager.
SNMPv1 Log Source Parameters for Trend Micro Control Manager
If JSA does not automatically detect the log source, add a log source on the JSA Console by using the SNMPv1 protocol.
When you use the SNMPv1 protocol, there are specific parameters that you must use.
The following table describes the parameters that require specific values to collect SNMPv1 events from Trend Micro Control Manager:
Parameter |
Value |
---|---|
Log Source Name |
Type a name for your log source. |
Log Source Description |
Type a description for the log source. |
Log Source Type |
Trend Micro Control Manager |
Protocol Configuration |
SNMPv1 |
Log Source Identifier |
Type the IP address or host name for the log source as an identifier for events from your Trend Micro Control Manager appliance. |
Community |
Type the SNMP community name required to access the system containing SNMP events. The default is Public. |
Include OIDs in Event Payload |
Clear the Include OIDs in Event Payload check box, if selected. This options allows the SNMP event payload to be constructed using name-value pairs instead of the standard event payload format. Including OIDs in the event payload is required for processing SNMPv2 or SNMPv3 events from certain DSMs. |
SNMPv2 Log Source Parameters for Trend Micro Control Manager
If JSA does not automatically detect the log source, add a log source on the JSA Console by using the SNMPv2 protocol.
When you use the SNMPv2 protocol, there are specific parameters that you must use.
The following table describes the parameters that require specific values to collect SNMPv2 events from Trend Micro Control Manager:
Parameter |
Value |
---|---|
Log Source Name |
Type a name for your log source. |
Log Source Description |
Type a description for the log source. |
Log Source Type |
Trend Micro Control Manager |
Protocol Configuration |
SNMPv2 |
Log Source Identifier |
Type the IP address or host name for the log source as an identifier for events from your Trend Micro Control Manager appliance. |
Community |
Type the SNMP community name required to access the system containing SNMP events. The default is Public. |
Include OIDs in Event Payload |
Clear the Include OIDs in Event Payload check box, if selected. This options allows the SNMP event payload to be constructed using name-value pairs instead of the standard event payload format. Including OIDs in the event payload is required for processing SNMPv2 or SNMPv3 events from certain DSMs. |
SNMPv3 log source parameters for Trend Micro Control Manager
If JSA does not automatically detect the log source, add a Trend Micro Control Manager log source on the JSA Console by using the SNMPv3 protocol.
When you use the SNMPv3 protocol, there are specific parameters that you must use.
The following table describes the parameters that require specific values to collect SNMPv3 events from Trend Micro Control Manager:
Parameter |
Value |
---|---|
Log Source Name |
Type a name for your log source. |
Log Source Description |
Type a description for the log source. |
Log Source Type |
Trend Micro Control Manager |
Protocol Configuration |
SNMPv3 |
Log Source Identifier |
Type a unique name for the log source. |
For more information about SNMPv3 log source parameters, see SNMPv3 Protocol Configuration Options.
Configuring SNMP Traps
You can configure SNMP traps for Trend Micro Control Manager.
Trend Micro Control Manager v5.5 requires hotfix 1697 or hotfix 1713 after Service Pack 1 Patch 1 to provide correctly formatted SNMPv2c events. For more information, see your vendor documentation.
Log in to the Trend Micro Control Manager device.
Choose one of the following options based on the Trend Micro Control Manager version you're using:
For v5.5, select Administration >Settings >Event Center Settings.
Note:Trend Micro Control Manager v5.5 requires hotfix 1697 or hotfix 1713 after Service Pack 1 Patch 1 to provide correctly formatted SNMPv2c events. For more information, see your vendor documentation
For v6.0, select Administration >Event Center >General Event Settings.
Set the SNMP trap notifications: In the SNMP Trap Settings field, type the Community Name.
Type the JSA server IP address.
Click Save.
You are now ready to configure events in the Event Center.
Choose one of the following options based on the Trend Micro Control Manager version you're using:
For v5.5, select Administration >Event Center.
For v6.0, select Administration >Event Center >Event Notifications..
From the Event Category list, expand Alert.
Click Recipients for an alert.
In Notification methods, select the SNMP Trap Notification check box.
Click Save.
The Edit Recipients Result window is displayed.
Click OK.
Repeat Configuring SNMP Traps for every alert that requires an SNMP Trap Notification.
The configuration is complete. Events from Trend Micro Control Manager are displayed on the Log Activity tab of JSA. For more information about Trend Micro Control Manager, see your vendor documentation.