Documentation Center
AlienVault® USM Appliance™

NETGEAR Switch

When you configure NETGEAR Switch to send log data to USM Appliance, you can use the NETGEAR Switch plugin to translate the raw log data into normalized events for analysis.

Device Details
Vendor NETGEAR
Device Type Router/switch
Connection Type Syslog
Data Source Name Netgear-switch
Data Source ID 1857

Integrating NETGEAR Switch

Before you configure the NETGEAR Switch integration, you must have the IP Address of the USM Appliance Sensor.

To configure NETGEAR Switch to send log data to USM Appliance

  1. From the NETGEAR Switch user interface, select Monitoring > Logs > Server Log.
  2. Enter the USM Appliance IP address into the Server IP field.
  3. Enter 514 into the UDP Port field.
  4. Select a Facility for syslog. (The default is 0.)
  5. (Optionally) Add a description for the server entry, for example, "AlienVault USM Appliance".
  6. Select Informational as Minimum Severity.
  7. Click Add to apply your updates.

Plugin Enablement

For plugin enablement information, see Enable Plugins.

Additional Resources and Troubleshooting

http://documentation.netgear.com/gs700ts/enu/202-10228-02/pdfs/monitoring.pdf

For troubleshooting, refer to the vendor documentation:

https://www.netgear.com/support/