Documentation Center
AlienVault® USM Appliance™

Huawei IPS Module

When you configure Huawei IPS Module to send log data to USM Appliance, you can use the Huawei IPS Module plugin to translate the raw log data into normalized events for analysis.

Device Details
Vendor Huawei
Device Type IPS
Connection Type Syslog
Data Source Name Huawei-ips
Data Source ID 1873

Integrating Huawei IPS Module

Before you configure the Huawei IPS Module integration, you must have the IP Address of the USM Appliance Sensor.

To configure Huawei IPS Module to send Syslog messages to USM Appliance

  1. In the IPS module interface, select System > Log Configuration.
  2. Configure the following parameters of the syslog sending function:
    • Log Host IP Address: The USM Appliance IP address

      Note: This entry must be an actual IP address (not a hostname).

    • Destination Port: Leave it as default or specify 514.
    • Language: Select English.
    • Send Interface: The configured interface that will send the logs from the IPS Module.
  3. Click Apply.

Plugin Enablement

For plugin enablement information, see Enable Plugins.

Additional Resources and Troubleshooting

http://support.huawei.com/enterprise/docinforeader.action?contentId=DOC1000047720&partNo=10122

For troubleshooting, refer to the vendor documentation:

http://support.huawei.com/enterprise/en/knowledge/index.html