ArcSight Integration
To add an ArcSight server:
- Open Manage.
- Select Configuration > ESM Integration > ArcSight Integration.
- Select the Enable ArcSight Integration check box.
- Click Add ArcSight Server.
- Configure these options:
- ArcSight Server IP Address / Hostname — IP address or host name of the ArcSight Server the Wi-Fi Cloud communicates with.
- Port Number — Port number of the ArcSight Server to which data is sent.
- CIP — If you use a Cloud Integration Point on your network, select a CIP-enabled WatchGuard AP that you want to use to communicate with Wi-Fi Cloud.
- Enabled — Click this check box to enable CEF messages and audit logs generated by Wi-Fi Cloud to be sent to the ArcSight Server.
- Forward Events — Send CEF messages to the ArcSight Server.
- Forward Audit Logs — Send audit log messages to the ArcSight Server.
- Click OK to save the changes.
Current Status displays the status of the ArcSight integration service.
- Running — The service is running.
- Stopped — The service has stopped.
If the host name of the server cannot be resolved, the status displays an error: "Cannot resolve hostname for one or more destination servers”.