McAfee DTP-165C-DPVG Installation Guide - Page 41

Add syslog servers to McAfee DLP systems, Resynchronize McAfee DLP systems with an NTP server

Page 41 highlights

Configuring McAfee DLP appliances and adding servers Add syslog servers to McAfee DLP systems 5 9 Select Actions | Create McAfee Logon Collector. 10 Enter the IP address of the McAfee Logon Collector into the Export NetDLP Certificate field. 11 Select the Paste from Clipboard option and paste the Base 64 text into the box. Alternatively, you can export the certificate from McAfee Logon Collector to your desktop, then Browse to it from the Import MLC Certificate | From File field. 12 Click Apply. This authenticates the McAfee Logon Collector to McAfee DLP Manager. 13 Click the Export link to save the NetDLP certificate to your desktop. The file name is netdlp_certificate.cer. 14 Open a web browser, enter the IP address of the McAfee Logon Collector in the address bar, and log on. 15 Select Menu | Configuration | Trusted CA. 16 Click New Authority. 17 Browse to the netdlp_certificate.cer file you saved to your desktop. 18 Click Open, then click Save. This authenticates the DLP Manager to McAfee Logon Collector. 19 Open a Remote Desktop session on the McAfee Logon Collector server and restart it. When the server comes up, the SSL connection between the servers is complete. Add syslog servers to McAfee DLP systems You can add syslog servers to McAfee DLP systems just by having them on the network. They are automatically recognized if they reside on the same network as DLP devices. You can use syslog servers to collect information about the McAfee DLP system. If a syslog server is installed on the network, DLP automatically sends messages about significant events. Resynchronize McAfee DLP systems with an NTP server An NTP server is required to synchronize the connections between McAfee DLP appliances, servers, and the network, but you only have to identify a time server during the initial installation of the system. Stop and restart the NTP daemon to manually reset the time and resyncronize the system. McAfee Data Loss Prevention 9.2.0 Installation Guide 41

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76

9
Select
Actions
|
Create McAfee Logon Collector
.
10
Enter the IP address of the McAfee Logon Collector into the
Export NetDLP Certificate
field.
11
Select the
Paste from Clipboard
option and paste the Base 64 text into the box.
Alternatively, you can export the certificate from McAfee Logon Collector to your desktop, then
Browse
to it from the
Import MLC Certificate
|
From File
field.
12
Click
Apply
.
This authenticates the McAfee Logon Collector to McAfee DLP Manager.
13
Click the
Export
link to save the NetDLP certificate to your desktop.
The file name is
netdlp_certificate.cer
.
14
Open a web browser, enter the IP address of the McAfee Logon Collector in the address bar, and log
on.
15
Select
Menu
|
Configuration
|
Trusted CA
.
16
Click
New Authority
.
17
Browse to the
netdlp_certificate.cer
file you saved to your desktop.
18
Click
Open
, then click
Save
.
This authenticates the DLP Manager to McAfee Logon Collector.
19
Open a Remote Desktop session on the McAfee Logon Collector server and restart it.
When the server comes up, the SSL connection between the servers is complete.
Add syslog servers to McAfee DLP systems
You can add syslog servers to McAfee DLP systems just by having them on the network. They are
automatically recognized if they reside on the same network as DLP devices.
You can use syslog servers to collect information about the McAfee DLP system. If a syslog server is
installed on the network, DLP automatically sends messages about significant events.
Resynchronize McAfee DLP systems with an NTP server
An NTP server is required to synchronize the connections between McAfee DLP appliances, servers,
and the network, but you only have to identify a time server during the initial installation of the system.
Stop and restart the NTP daemon to manually reset the time and resyncronize the system.
Configuring McAfee DLP appliances and adding servers
Add syslog servers to McAfee DLP systems
5
McAfee Data Loss Prevention 9.2.0
Installation Guide
41