cancel
Showing results for 
Search instead for 
Did you mean: 

Asset Classification

I am on ESM 9.3.2. Does anyone know if it is possible to classify, tag, or put a higher severity on certain data sources? I would eventualy like to create an alarm or correlation rule on a specific set of assets.

6 Replies
Highlighted

Re: Asset Classification

You can tag assets identified by Source IP using the Asset Management interface, you can select assets by tag in Views using the Tag option in the Source IP or Destination IP filter.

I'm not sure whether this works in all possible filter construction dialogues but it's a reasonable starting point.

cheers,

Andrew

Re: Asset Classification

I follow what you are talking baout with Asset Manager, but i don't follow with the views you are talking about. would you  be able to clarify, or post a screenshot?

Re: Asset Classification

Hmmm..cannot insert image, can select image file but upload button greyed out. Will try to clarify anyway.

In the View Filter panel if you select the Filter Variable Funnel symbol you will get a dialogue with various tabs - Variable, Assets, Asset Groups, Tag, Watchlists. The Assets, Asset Groups, and Tag tabs allow you to select based on details applied to the assets in the Asset Manager view.

In the Asset Manager view you can create your own Tags and Tag Groups to slice and dice the assets any way you want. I think the 'Asset' in this case is really just the IP address rather than the fully qualified domain name so DHCP can make life miserable.

This works for Source IP and Destination IP, it may work for other filter fields but the only way to find out is to just look.

Re: Asset Classification

I dont mean to sound dificult, but I don't understand what the "View Filter Panel" is. How are you getting to this?

Re: Asset Classification

The online 'help' calls it the "Filters pane". It is the panel/pane that occupies the right-hand side of the ESM console running from top to bottom called "Filters".

At the top of the ESM console between 'options' and 'logout' you will see 'help'...click that and click the "Getting started" > "Navigating the ESM console" topic and that should display help on the main screen components.

Re: Asset Classification

Oh! I know what you,re talking about. My technical term for that is "thing on the right-hand side". Thanks.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community