Security

Reply
Occasional Contributor II

clearpass configuration for sys log

 
  • Please help me i want to connect my clear pass (10.3.4.54) to syslog server(10.3.4.61) ,so then any guest if connect in my ssid guest that will notify me in sys log server, so please help me how to do  this,as i am new in this field so i need your help.
Moderator

Re: clearpass configuration for sys log

Under Administration->External Server->Syslog Targets... defind your SIEM server and appropiate port and protocol.

 

Then, define the syslog you require under Syslog Export Filter, attached the filter to the previously defined target.

 

Fore the filter, you'll lilely want to define this of a session log, then under the filter-tab, select Guest Access Request, you may want a second filter for RADIUS auth's as well.


Best Regards
-d

ClearPass Product Manager

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Occasional Contributor II

Re: clearpass configuration for sys log

thank you sir

Occasional Contributor II

Re: clearpass configuration for sys log

Hello sir,

 

I have now one more issue as i add my controller in syslog server ,my syslog server stop working and gets closed ,and  after that everytime i have to reinstall my syslog server ,can u please let me know how  can i look or short out this problem

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: