Step |
Decide which events you want to send to the cloud, the method of sending events and the regional cloud to use. |
See the topics under Introduction to Integrating Secure Firewall Management Center and SecureX.
|
Step
|
Meet the requirements.
|
See Requirements for Integration Using Syslog.
|
Step
|
Access Security Services Exchange (SSE), the portal for SecureX that you use for managing devices and filtering events.
|
See Access Security Services Exchange.
|
Step |
Install and configure a Cisco Security Services Proxy (CSSP) server.
|
Download the free installer and instructions from Security Services Exchange:
In Security Services Exchange, from the Tools icon near the top-right of the browser window, select Downloads.
|
Step
|
In Security Services Exchange, enable features.
|
Click Cloud Services and enable the following options:
|
Step
|
Configure your devices to send syslog messages for supported events to the proxy server.
|
Look in the management center online help for information about syslog in the "Event Analysis Using External Tools" chapter.
|
Step
|
In your product, ensure that the messages identify the device that generated each event.
|
In your management center, under the Platform Settings Syslog Settings tab, Enable Syslog Device ID, and specify an identifier.
|
Step
|
Allow time for your system to generate supported events.
|
--
|
Step
|
Verify that your events appear as expected in Security Services Exchange and troubleshoot if necessary.
|
See:
|
Step
|
In Security Services Exchange, configure the system to automatically promote significant events.
|
Important
|
If you do not automate event promotion, you must manually review, and promote events to view them in SecureX.
|
See information in the online help in Security Services Exchange about promoting events.
To access SSE, see Access Security Services Exchange.
|
Step
|
(Optional) In Security Services Exchange, configure automatic deletion of certain nonsignificant events.
|
For more information on filtering events, see Security Services Exchange online help.
To access SSE, see Access Security Services Exchange.
|
Step
|
In SecureX, add a module.
|
In SecureX, navigate to Integration Modules > Integration and add a module.
For more information about this module, see the online help in SecureX.
|