Skip to main content

LevelBlue Completes Acquisition of Cybereason.  Learn More

LevelBlue Completes Acquisition of Cybereason.  Learn More

Services
Cyber Advisory
Managed Cloud Security
Data Security
Managed Detection & Response
Email Security
Managed Network Infrastructure Security
Exposure Management
Security Operations Platforms
Incident Readiness & Response
SpiderLabs Threat Intelligence
Solutions
BY TOPIC
Offensive Security
Solutions to maximize your security ROI
Operational Technology
End-to-end OT security
Microsoft Security
Unlock the full power of Microsoft Security
Securing the IoT Landscape
Test, monitor and secure network objects
Why LevelBlue
About Us
Awards and Accolades
LevelBlue SpiderLabs
LevelBlue Security Operations Platforms
Security Colony
Partners
Microsoft Security
Unlock the full power of Microsoft Security
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Loading...
Loading...

HOWTO: Configuring SNMP for Alerts

Expand / Collapse


This article applies to:

  • NAC 5.x 

Question:

  • How do I configure SNMP alerts on NAC? 

Procedure:

To alert to SNMP, set up the SNMP information as an Alert destination on NAC.

  1. Navigate to the following location: Configuration > Organization > Alert Destination > SNMP
  2. Complete these fields:
    ◾Name - Meaningful Name
    ◾Protocol - SNMP
    ◾IP - IP of SNMP Destination
    ◾Port - Default (162)
    ◾Protocol Data  - Community String where applicable.

Configure Policy Alerts or Appliance Alerts and then manually trigger one of these events by matching on a condition.

Verifying Configuration:

You can test that NAC sent an event to the SNMP destination by running a packet capture with tcpdump.

To capture SNMP traffic to the default port, you can use the following tcpdump command. If you are not using the default SNMP port, adjust the command as needed.
 
tcpdump -vvi mgmt1 port 162

To trigger an event, a device must move from one zone to another.


To contact Trustwave about this article or to request support:


Rate this Article:
     

Add Your Comments


Comment submission is disabled for anonymous users.
Please send feedback to Trustwave Technical Support or the Webmaster
.