NetIQ Module: Security Manager for Cisco IP Telephony Security

Version

Security Manager for Cisco IP Telephony Security

Date Published

June 2006

Description

Security Manager for Cisco IP Telephony Security, an integral component of the VoIP Security Solution, works in conjunction with NetIQ AppManager to enable you and your organization to monitor an IP telephony environment in real-time to detect security events and configuration changes. With the two applications working together, you'll be able to:

Correlate security events to identify and respond to security threats
Log Voice over IP security events for auditing purposes
Perform analyses and forensics to assess call usage patterns in order to spot abuse and for long-term planning purposes

This document outlines why you should install this product, identifies any known issues, and specifies installation requirements. For more information about installing the Security Manager for Cisco IP Telephony Security module, see the monitoring guide titled NetIQ Security Manager for Cisco IP Telephony Security in the following folder on the user interface computer:

installation folder\NetIQ Security Manager\OnePoint\Documentation\Monitoring Guides

Where installation folder is the location in which you installed Security Manager user interfaces.

Why Install This Product?

Security Manager for Cisco IP Telephony Security provides the following features:

Event Management rules that determine about how VoIP-specific AppManager events are collected when forwarded by the AppManager/Security Manager Connector.
Correlation rules that correlate VoIP security events in order to generate correlation alerts.
Log Archival rules and metadata mapping that specify which VoIP security events are collected for the log management database.
Forensic Analysis queries that you can use as-is, or customize to suit the needs of your IP telephony environment.

Installation Requirements

The VoIP Security Solution requires Security Manager version 5.5 and the Security Manager for Cisco IP Telephony Security module, which consists of three components:

Event Manager Support for Cisco IP Telephony
Log Manager Support for Cisco IP Telephony
Correlation for Cisco IP Telephony

For details on installing Security Manager, refer to the Installation Guide for NetIQ Security Manager. For details on importing the modules, see the monitoring guide titled NetIQ Security Manager for Cisco IP Telephony Security.

To benefit from the complete VoIP Security Solution, you must be running AppManager 6.0 in your environment (version 6.0.2 is recommended, but not required) and have installed the AppManager for Cisco IP Telephony Security module.

Installation and Configuration

You use the Security Manager version 5.5 Module Installer to download the Security Manager for Cisco IP Telephony Security module.

To download the Cisco IP Telephony Security module:

Open the Security Manager Monitor Console.
From Security Manager Today, expand Getting Started and then click Launch Module Installer.
Select NetIQ AutoSync Server.
Select the Cisco IP Telephony module.
Click Install.

For more information about using the Module Installer to maintain the currency of your module, see the User Guide for NetIQ Security Manager.

For details on configuring your new module, see the monitoring guide titled NetIQ Security Manager for Cisco IP Telephony Security.

Additions to Documentation

The product documentation is up-to-date and provides the latest information.

Known Issues

NetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. There were no known issues to report as of the release of this module. If you need further assistance with any issue, please contact NetIQ Technical Support (www.netiq.com/support).