User's Guide

AirTight Management Console Configuration
139
Arcsight Integration
Add Arcsight Server
To add an Arcsight server, do the following.
1.
Go to Configuration>ESM Integration>Arcsight Integration.
2. Click the Add Arcsight Server hyperlink.
3. Enter the Arcsight IP address, port number.
4. Select the Enabled check box if you want to enable sending CEF messages and/or audit logs
generated by AirTight Wi-Fi/AirTight WIPS to this server.
5.
Select the Forward Events check box to send CEF messages to the Arcsight server.
6. Select the Forward Audit Logs check box to send audit logs to the Arcsight server.
7. Click OK to save the changes.
Edit Arcsight Server
To edit Arcsight server details, do the following.
1.
Go to Configuration>ESM Integration>Arcsight Integration.
2. Click the Arcsight server IP address and port hyperlink in the list of Arcsight servers.
3. Make the necessary changes.
4. Click OK to save the changes.
Delete Arcsight Server
To edit Arcsight server details, do the following.
1. Go to Configuration>ESM Integration>Arcsight Integration.