Configuring a Blue Coat ProxySG Appliance

Firmware: 4.1.4

CollectorA TLC module that gathers or receives log messages from Log Sources.: Network CollectorA type of Collector that listens for Syslog and SNMP-based log messages from network devices. - Syslog

To configure a Blue Coat ProxySG appliance to send log messages to TLC with the Blue Coat Management Console:

1.

Log in to the appliance via the Management Console with Admin rights.

2.

Select Maintenance > Event1. Either a log message that a Manager has standardized (i.e. normalized) for use by TLC (a.k.a. Normalized Messages), or an event or vulnerability imported from a scanner. 2. An 'event message' collected from a Log Source. Logging > Syslog.

3.

In the Syslog tab:

a.

Enter the domain name or IP address of your loghost server in the Loghost field.

b.

Select Enable syslog and click Apply.

To configure a Blue Coat ProxySG appliance from a command prompt:

1.

Connect to the appliance and authenticate with Admin rights.

2.

Enter the following commands:

"event-log"

(config event-log) syslog loghost <loghost>

(config event-log) syslog enable

Where <loghost> is the host's domain name or IP address.

Next	If you are performing initial configuration of your TLC environmentConsists of all TLC software, Managers, Log Sources, Monitored Assets, Collectors, and data in your TLC installation., see Configuring your TLC Environment. Otherwise, see Adding a Monitored Asset for a new Log Source.