IBM ISS Proventia

The IBM® Integrated Systems Solutions®® (ISS) Proventia DSM for IBM QRadar® records all relevant IBM Proventia® events by using SNMP.

Procedure

  1. In the Proventia Manager user interface navigation pane, expand the System node.
  2. Select System.
  3. Select Services.

    The Service Configuration page is displayed.

  4. Click the SNMP tab.
  5. Select SNMP Traps Enabled.
  6. In the Trap Receiver field, type the IP address of your QRadar you want to monitor incoming SNMP traps.
  7. In the Trap Community field, type the appropriate community name.
  8. From the Trap Version list, select the trap version.
  9. Click Save Changes.

    You are now ready to configure QRadar to receive SNMP traps.

  10. To configure QRadar to receive events from an ISS Proventia device. From the Log Source Type list, select IBM Proventia Network Intrusion Prevention System (IPS).

    For more information about your ISS Proventia device, see your vendor documentation.