When you configure Huawei IPS Module to send log data to USM Appliance, you can use the Huawei IPS Module plugin to translate raw log data into normalized events for analysis. The table below provides some basic information for the plugin.
Device | Details |
---|---|
Vendor | Huawei |
Device Type | IPS |
Connection Type | Syslog |
Data Source Name | Huawei-ips |
Data Source ID | 1873 |
Integrating Huawei IPS Module
Before you configure the Huawei IPS Module integration, you must have the IP Address of the USM Appliance Sensor.
To configure Huawei IPS Module to send Syslog messages to USM Appliance
- In the IPS module interface, select System > Log Configuration.
- Configure the following parameters of the syslog sending function:
- Log Host IP Address: The USM Appliance IP address
Note: This entry must be an actual IP address (not a hostname).
- Destination Port: Leave it as default or specify 514.
- Language: Select English.
- Send Interface: The configured interface that will send the logs from the IPS Module.
- Log Host IP Address: The USM Appliance IP address
- Click Apply.
Plugin Enablement
For plugin enablement information, see Enable Plugins.
Additional Resources and Troubleshooting
For troubleshooting, refer to the vendor documentation: