Configuring SNMP traps

You can configure SNMP traps for Trend Micro Control Manager. Versions v5.5 and v6.0 are supported.

Procedure

  1. Log in to the Trend Micro Control Manager device.
  2. Choose one of the following options based on the Trend Micro Control Manager version you're using:
    1. For v5.5, select Administration > Settings > Event Center Settings.
      Note: Trend Micro Control Manager v5.5 requires hotfix 1697 or hotfix 1713 after Service Pack 1 Patch 1 to provide correctly formatted SNMPv2c events. For more information, see your vendor documentation.
    2. For v6.0 and v7.0, select Administration > Event Center > General Event Settings.
  3. Set the SNMP trap notifications: In the SNMP Trap Settings field, type the Community Name.
  4. Type the IBM QRadar server IP address.
  5. Click Save.

    You are now ready to configure events in the Event Center.

  6. Choose one of the following options based on the Trend Micro Control Manager version you're using:
    1. For v5.5, select Administration > Event Center.
    2. For v6.0, select Administration > Event Center > Event Notifications.
  7. From the Event Category list, expand Alert.
  8. Click Recipients for an alert.
  9. In Notification methods, select the SNMP Trap Notification check box.
  10. Click Save.

    The Edit Recipients Result window is displayed.

  11. Click OK.
  12. Repeat Configuring SNMP traps for every alert that requires an SNMP Trap Notification.

    The configuration is complete. Events from Trend Micro Control Manager are displayed on the Log Activity tab of QRadar. For more information about Trend Micro Control Manager, see your vendor documentation.