HP FutureSmart - Printer Integration with McAfee Enterprise Security Manager Security Information Event Management Solution

2
Introduction
HP FutureSmart printers provide event information through standard Syslog server logging. Advanced security
logging events can be enabled when configuring the Syslog settings. This security event information can be sent to an
active McAfee Enterprise Security Manager (ESM) Security Information Event Management Solution (SIEM). Use the
information provided in this whitepaper to configure the printer to send syslog events to the McAfee Event Receiver.
Requirements
The following components are needed to configure the HP FutureSmart printers to send advanced security logging
events to the McAfee ESM SIEM solution.
• An active McAfee ESM SIEM environment
• HP FutureSmart printers configured to send syslog events to the IP address of the McAfee Event Receiver
Adding HP printers to McAfee ESM
Log in to ESM and add the data source to a receiver.
1. Select a receiver.
2. Click the Properties icon.
3. From the Receiver Properties window, select Data Sources.
4. Click Add.
Option Definition
Data Source Vendor Hewlett-Packard
Data Source Model Laserjet Printers
Data Format Default
Data Retrieval SYSLOG (Default)
Enabled: Parsing/Logging/SNMP Trap Parsing
Name Name of data source
IP Address/Hostname IP address or hostname of HP LaserJet Printer
Syslog Relay None
Mask 32
Require Syslog TLS Enable to require the Receiver to communicate over TLS
Support Generic Syslogs Do nothing
Time Zone Time zone of data being sent