Up
Previous Next

Sheriff CSM™

Huawei IPS Module

When you configure Huawei IPS Module to send log data to Sheriff CSM, you can use the Huawei IPS Module plugin to translate raw log data into normalized events for analysis. The table below provides some basic information for the plugin:

Plugin Information

Device	Details
Vendor	Huawei
Device Type	IPS
Connection Type	Syslog
Data Source Name	Huawei-ips
Data Source ID	1873

Integrating Huawei IPS Module

Before you configure the Huawei IPS Module integration, you must have the IP Address of the Sheriff CSM Sensor (Deputy).

To configure Huawei IPS Module to send Syslog messages to Sheriff CSM

1. In the IPS module interface, select System > Log Configuration.

2. Configure the following parameters of the syslog sending function:

   • Log Host IP Address: The Sheriff CSM IP address

     Note: This entry must be an actual IP address (not a hostname).

   • Destination Port: Leave it as default or specify 514.
   • Language: Select English.
   • Send Interface: The configured interface that will send the logs from the IPS Module.

3. Click Apply.

Plugin Enablement

For plugin enablement information, see Enable Plugins.

Additional Resources and Troubleshooting

http://support.huawei.com/enterprise/docinforeader.action?contentId=DOC1000047720&partNo=10122

For troubleshooting, refer to the vendor documentation:

http://support.huawei.com/enterprise/en/knowledge/index.html