This quick start guide will help Accenture Security customers configure Vormetric Data Security Manager (DSM) to send logs to the Log Collection Platform (LCP).
This document includes the following topics:
A list of supported versions is available in the Accenture Security Supported Products List document (Accenture_MSS_Supported_Products_List.xlsx) which can be found at
Accenture Portal - https://mss.accenture.com/PortalNextGen/Reports/Documents
To configure Vormetric DSM to send log messages to the LCP, follow the steps below.
1. Login to the Vormetric DSM console as system administrator.
2. Go to System > General Preferences, click the System tab, and select Syslog Enabled. This enables communication between the DSM and LCP server. Click Apply.
Figure 1-1: The General Preferences window.
3. Go to System > Log Preferences and click the Server tab.
4. From the Logging Level drop-down list, select Info. The level you select determines the type of logs sent to the LCP server. Click Apply.
Figure 1-2: The Log Preferences window.
5. Go to Log > Syslog and click Add. Enter the following information in the Add Syslog Server window.
i. In the Server Name text box, type the IP address the LCP.
ii. From the Transport Protocol drop-down list, select UDP or TCP.
iii. In the Port Number text box, type a value from 1 to 65535.
iv. From the Message Format drop-down list, select Plain Message.
6. Click Ok.
Figure 1-3: The Add Syslog Server window.
|Protocol||UDP or TCP||
The collector can accept logs in TCP and UDP.
Note: While TCP offers guaranteed delivery of log packets, it places a larger overhead on the LCP.
To balance TCP for reliability over UDP for speed/simplicity, contact the Accenture Security MSS onboarding team.
|IP Address||The IP address of DSM.||Logging device IP address mentioned in the Pre-Installation Questionnaire (PIQ).|
|Signature||vormetric:||MSS recommended signature processed by the Vormetric Data Security Platform event collector.|
|Port Number||514 or 601||
For TCP, the default port is 601 and for UDP it is 514.Note: The LCP can be configured to listen on a non-standard port (1-65535), please advise the MSS onboarding team if this is a requirement.
Copyright © 2020 Accenture. All rights reserved.
Accenture, the Accenture Logo, and DeepSight Intelligence are trademarks or registered trademarks of Accenture in the U.S. and other countries. Other names may be trademarks of their respective owners.
The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Accenture and its licensors, if any.
THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. ACCENTURE SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE.
The Licensed Software and Documentation are deemed to be commercial computer software as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19 "Commercial Computer Software - Restricted Rights" and DFARS 227.7202, et seq. "Commercial Computer Software and Commercial Computer Software Documentation," as applicable, and any successor regulations, whether delivered by Accenture as on premises or hosted services. Any use, modification, reproduction release, performance, display or disclosure of the Licensed Software and Documentation by the U.S. Government shall be solely in accordance with the terms of this Agreement.