Nortel Secure Network Access Switch

The IBM® QRadar® Nortel Secure Network Access Switch (SNAS) DSM records all relevant switch events by using syslog.

About this task

Before you configure a Nortel SNAS device in QRadar, take the following steps:

Procedure

  1. Log in to the Nortel SNAS user interface.
  2. Select the Config tab.
  3. Select Secure Access Domain and Syslog from the Navigation pane.

    The Secure Access Domain window is displayed.

  4. From the Secure Access Domain list, select the secure access domain. Click Refresh.
  5. Click Add.

    The Add New Remote Server window is displayed.

  6. Click Update.

    The server is displayed in the secure access domain table.

  7. Using the toolbar, click Apply to send the current changes to the Nortel SNAS.

    You are now ready to configure the log source in QRadar.

  8. To configure QRadar to receive events from a Nortel SNAS device: From the Log Source Type list, select the Nortel Secure Network Access Switch (SNAS) option.