Up
Previous Next

Sheriff CSMâ„¢

NETGEAR Switch

When you configure NETGEAR Switch to send log data to Sheriff CSM, you can use the NETGEAR Switch plugin to translate raw log data into normalized events for analysis. The table below provides some basic information for the plugin:

Plugin Information
DeviceDetails
Vendor NETGEAR
Device Type Router/switch
Connection Type Syslog
Data Source Name Netgear-switch
Data Source ID 1857

Integrating NETGEAR Switch

Before you configure the NETGEAR Switch integration, you must have the IP Address of the Sheriff CSM Sensor (Deputy).

To configure NETGEAR Switch to send log data to Sheriff CSM
  1. From the NETGEAR Switch user interface, select Monitoring > Logs > Server Log.
  2. Enter the Sheriff CSM IP address into the Server IP field.

  3. Enter 514 into the UDP Port field.

  4. Select a Facility for syslog. (The default is 0.)

  5. (Optionally) Add a description for the server entry, for example, "Sheriff CSM".

  6. Select Informational as Minimum Severity.

  7. Click Add to apply your updates.

Plugin Enablement

For plugin enablement information, see Enable Plugins.

Additional Resources and Troubleshooting

http://documentation.netgear.com/gs700ts/enu/202-10228-02/pdfs/monitoring.pdf

For troubleshooting, refer to the vendor documentation:

https://www.netgear.com/support/

Copyright 2020 Sheriff Cyber Security, LLC. All rights reserved.