Cisco Sourcefire

CISCO SOURCEFIRE

To Forward Cisco Sourcefire Ids Intrusion Alerts

Log in to the SourceFire IDS using web interface.

Go to Policies > Intrusion > Intrusion Policy.

Locate the policy you want to apply and select Edit.

Click Advanced Settings.

In the list, locate Syslog Alerting and set it to Enabled.

In the Logging Hosts field, type the IP address of Log Collector.

Choose an appropriate Facility a

Last updated