Endpoint Protection

Hi,

with the latest version Symantec AntiVirus for Linux 1.0.13, how do I configure the syslog server to point to my Tripwire server ?

WHat file to edit and what port to open in the firewall ?

Thanks.

Hello,

You can configure Centralized Logging and Reporting for Symantec Antivirus for Linux using Symantec Endpoint Protection Manager or to a Specific SYSLOG server.

All events that are generated are logged to the standard system log via syslog.

You may have to make the necessary enteries in /etc/syslog.conf configuration file.

I would request you to check the SAV for Linux Implementation Guide (SAV_Linux_Impl.pdf) for more information on the same.

Also, check this Article: https://www-secure.symantec.com/connect/articles/use-configedexe-config-sav-linux

Hope that helps!!

many thanks Mithun, so I have to create the proper config file first before installing it into the Linux host ?

Hello,

That is correct. 

Hope that helps!!

many thanks for the information Mithun !