Administrator Guide

Dell Networking W-ClearPass Policy Manager 6.6 | User Guide Configuring Processing for Ingress Events | 677
Chapter 13
Configuring Processing for Ingress
Events
This chapter includes the following information:
l Enabling Ingress Event Dictionaries
l Configuring the Ingress Event Sources
l Configuring an Event-Based Enforcement Service
l Configuring the Ingress Receiving Ports
l Enabling Ingress Events Processing
Overview
This chapter provides the procedures for configuring W-ClearPass Policy Manager to process ingress threat-
related events.
The W-ClearPass Ingress Event Engine processes inbound threat-related events—which are Syslog events
received from any third-party vendor device—and performs enforcements and actions based on defined
policies.
Enabling Ingress Event Dictionaries
By default, a set of ingress event dictionaries are available and initially set to disabled. You must enable the
ingress event dictionaries before you proceed.
To enable an ingress event dictionary:
1. Navigate to Administration > Dictionaries > Ingress Events.
The Ingress Events Dictionaries page opens, where the set of ingress event dictionaries are displayed. By
default, they are disabled.
Figure 678: Viewing Ingress Event Dictionaries
2. To enable a dictionary, select the Ingress Events Dictionary for the appropriate vendor.
The Events Attributes dialog opens.