Security

Reply
New Contributor

clearpass configuration for sys log

 
  • Please help me i want to connect my clear pass (10.3.4.54) to syslog server(10.3.4.61) ,so then any guest if connect in my ssid guest that will notify me in sys log server, so please help me how to do  this,as i am new in this field so i need your help.
Moderator

Re: clearpass configuration for sys log

Under Administration->External Server->Syslog Targets... defind your SIEM server and appropiate port and protocol.

 

Then, define the syslog you require under Syslog Export Filter, attached the filter to the previously defined target.

 

Fore the filter, you'll lilely want to define this of a session log, then under the filter-tab, select Guest Access Request, you may want a second filter for RADIUS auth's as well.


Best Regards
-d

ClearPass Product Manager

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
New Contributor

Re: clearpass configuration for sys log

thank you sir

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: