When you configure your NETGEAR Switch to send log data to USM Appliance, you can use the NETGEAR Switch plugin to translate raw log data into normalized events for analysis. The table below provides some basic information for the plugin.

Plugin Information
Device Details
Device Type Router/switch
Connection Type Syslog
Data Source Name Netgear-switch
Data Source ID 1857

Integrating NETGEAR Switch

Before you configure the NETGEAR Switch integration, you must have the IP Address of the USM Appliance Sensor.

To configure NETGEAR Switch to send log data to USM Appliance

  1. From the NETGEAR Switch user interface, select Monitoring > Logs > Server Log.
  2. Enter the USM Appliance IP address into the Server IP field.
  3. Enter 514 into the UDP Port field.
  4. Select a Facility for syslog. (The default is 0.)
  5. (Optionally) Add a description for the server entry, for example, "AlienVault USM Appliance".
  6. Select Informational as Minimum Severity.
  7. Click Add to apply your updates.

Plugin Enablement

For plugin enablement information, see Enable Plugins.

Additional Resources and Troubleshooting

For troubleshooting, refer to the vendor documentation: