cancel
Showing results for 
Search instead for 
Did you mean: 
dahmed
Level 7

MPLS VPN Network devices

Hi Guys,

I have recently deployed SIEM for enterprises environment HA mode, I have some doubt about Syslog configuration on each MPLS VPN routers,does every routers is required to send syslog or Gateway router is sufficient to send syslog and provided the result.

What is best practice for Data Sources configuration in Ent. infrastructure.

Please share your input

Regards,

Dilnawaz Ahmed

0 Kudos
2 Replies
exbrit
Level 21

Re: MPLS VPN Network devices

I moved this to Business > SIEM for faster response

---

Peter

Moderator

0 Kudos
syed_rizvi
Level 10

Re: MPLS VPN Network devices

It all depends on your security goals, network design, SIEM use case and current load on your SIEM devices. At minimum, I would start with gateway first. Also, I strongly suggest to collect flow data from your router/switches as it will give you greater insight on your traffic and capture anomalies.

0 Kudos