Deploy secure event connector on ubuntu virtual machine

Deploy the Secure Event Connector on your Ubuntu VM to enable event collection and management through CDO.

The Secure Event Connector allows you to collect and forward security events from your network devices to CDO for centralized monitoring and analysis. This deployment process requires bootstrap data from CDO to establish the secure connection.

Before you begin

You should have installed Secure Device Connector on your Ubuntu VM as described in Deploy a VM for Running the Secure Device Connector and Secure Event Connector.

Follow these steps to deploy Secure Event Connector on Ubuntu Virtual Machine:

Procedure

Step 1

Log on to Security Cloud Control.

Step 2

From the Security Cloud Control Home page, click Firewall.

Step 3

From the left pane, Administration > Secure Connectors.

Step 4

Click the The image illustrates the command line interface showing a user switching to the 'sdc' user and navigating to the '/usr/local/cdo/toolkit' directory on an Ubuntu virtual machine. icon and then click Secure Event Connector.

Step 5

Copy the SEC bootstrap data in step 2 on the window to a notepad.

Step 6

Execute the following commands:

[sdc@vm]:~$sudo su sdc 
sdc@vm:/home/user$ cd /usr/local/cdo/toolkit

When prompted, enter the SEC bootstrap data that you have copied.

sdc@vm:~/toolkit$ ./sec.sh setup 
Please input the bootstrap data from Setup Secure Event Connector page of CDO: 
Successfully on-boarded SEC
It may take a few minutes for the Secure Event Connector to become "Active" in Security Cloud Control.

The Secure Event Connector is successfully deployed and becomes "Active" in CDO, enabling event collection and forwarding from your network devices.