Symantec Endpoint Protection Configuration On-Premises

This article covers how to configure Symantec Endpoint project configuration on-premises.

Take the following steps to configure your Symantec Endpoint Protection

Procedure

1. Log in to your Symantec Endpoint Protection Manager system.
2. In the left pane, click the Admin icon.
3. In the bottom of the View Servers pane, click Servers.
4. In the View Servers pane, click Local Site.
5. In the Tasks pane, click Configure External Logging.
6. From the Generals tab, select the Enable Transmission of Logs to a Syslog Server check box.
7. In the Syslog Server field, type the IP address of Google Chronicle Forwarder that you want to parse the logs.
8. In the UDP Destination Port field, type “11644”.
9. In the Log Facility field, type Local6.
10. In the Log Filter tab, under Management Server Logs, select the Audit Logs check box.
11. In the Client Log pane, select the Security Logs check box.
12. In the Client Log pane, select the Risks check box.
13. Click OK.