HP Enterprise - Logging Embedded Security Features to HP ArcSight or Standard Syslog Servers (white paper)

ManualsBrandsHP ManualsPrint & ScanC2S11A

Version 1.1 Public

July 2015

Logging HP FutureSmart Printer Embedded Security Features

to HP ArcSight or Standard Syslog Servers

Contents

Overview ................................................................................................................................................................................... 1

Configure the Printing Device for Sending Syslog Security Events ............................................................................. 2

Configure HP Printing Devices for HP ArcSight notifications ........................................................................................ 2

Kiwi Syslog Server installation ............................................................................................................................................ 2

Configure the Kiwi Syslog Server to Monitor HP Printer Security Events................................................................... 3

Monitor Kiwi Syslog Server console for security events ................................................................................................ 5

Overview

This document describes how to configure HP printing devices to send Syslog messages for

security events to an HP ArcSight environment or a standard Syslog server. Also described are

instructions on how to install and configure a freeware Syslog server, “Kiwi Syslog Server”, for

testing purposes and proof of concept.

Summary of content (6 pages)

PAGE 1
Logging HP FutureSmart Printer Embedded Security Features to HP ArcSight or Standard Syslog Servers Contents Overview ................................................................................................................................................................................... 1 Configure the Printing Device for Sending Syslog Security Events ............................................................................. 2 Configure HP Printing Devices for HP ArcSight notifications ......
PAGE 2
Configure the Printing Device for Sending Syslog Security Events 1. Using Internet Explorer, Browse to the Printer IP address 2. Select the “Networking Tab”, then Select the “Advanced Tab” in TCP/IP Settings 3. Enter the Syslog server parameters as shown: 4. Select “Apply” Configure HP Printing Devices for HP ArcSight notifications HP FutureSmart printing devices can be configured to provide security event notification to existing HP ArcSight environments.
PAGE 3
2. Run the Kiwi_Syslog_Server_Freeware.setup.exe file 3. Select “I Agree” to the Solarwinds license agreement 4. Select “Install Kiwi Syslog Server as an Application”, then Select Next 5. If required, Enter administrative user credentials, then Select Next 6. Select preferred program shortcuts, then Select Next 7. Verify Destination Folder 8. Select Install Configure the Kiwi Syslog Server to Monitor HP Printer Security Events 1. Open the Kiwi Syslog Server 2. Select “File”, then “Setup” 3.
PAGE 4
5. Click on “UDP” in the left Menu Tree 6. Select the “Listen for UDP Syslog messages” checkbox 7.
PAGE 5
8. Select “OK” Monitor Kiwi Syslog Server console for security events Open the Kiwi Syslog Server console and review any captured security logging entries © 2017 Copyright HP Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty.
PAGE 6
These issues are only seen on full solution CD or Downloaded drivers packages with self-installing drivers Page 6