Microsoft Exchange Server
The IBM QRadar DSM for Microsoft Exchange Server collects Exchange events by polling for event log files.
The following table identifies the specifications for the Microsoft Exchange Server DSM:
| Specification | Value |
|---|---|
| Manufacturer | Microsoft |
| DSM name | Exchange Server |
| RPM file name | DSM-MicrosoftExchange-QRadar_version-build_number.noarch.rpm |
| Supported versions |
Microsoft Exchange 2003 Microsoft Exchange 2007 Microsoft Exchange 2010 Microsoft Exchange 2013 Microsoft Exchange 2016 Microsoft Exchange 2019 |
| Protocol type |
WinCollect for Microsoft Exchange 2003 Microsoft Exchange protocol for Microsoft Exchange 2007, 2010, 2013, 2016 and 2019. |
| QRadar recorded event types |
Outlook Web Access events (OWA) Simple Mail Transfer Protocol events (SMTP) Message Tracking Protocol events (MSGTRK) |
| Automatically discovered? | No |
| Included identity? | No |
| More information | Microsoft website (http://www.microsoft.com) |
To integrate Microsoft Exchange Server with QRadar, use the
following steps:
- If automatic updates are not enabled, download the most recent version of the Microsoft Exchange Server DSM RPM from the IBM® Support Website.
- Configure your Microsoft Exchange Server DSM device to enable communication with QRadar.
- Create an Microsoft Exchange Server DSM log source on the QRadar Console.