cancel
Showing results for 
Search instead for 
Did you mean: 

Integration IBM Websphere

Hello!

I'm want to integrate my IBM Websphere Application Server and IBM Websphere Datapower Appliances.

There is no ASP in McAfee SIEM out of the box.

Alex

6 Replies

Re: Integration IBM Websphere

Alex,

This would probably require a professional services engagement to get McAfee to develop this, however, depending on the logging capabilities of the IBM devices, you may be able to setup syslog forwarding, or a file pull from the receiver to the appliance to grab logs, and then using the ASP parser build out custom parsers for the logs coming in.

Unfortunately I am not familiar with the logging options of IBM Websphere, so I would not be able to direct you on that side of things. If they can forward syslog, you can setup a data source for generic, syslog, and then write custom parsers in the policy editor.

Mikelb
Level 7
Report Inappropriate Content
Message 3 of 7

Re: Integration IBM Websphere

Hi Alex

We are wanting to do the same with Websphere (and some other IBM data sources).  I have asked McAfee to comment on if they plan to release any ASPs for these sources in the near future.  Otherwise we will have to engage McAfee to develop these for us.

I'll keep you posted if/when I get a response.

Mike

protah
Level 7
Report Inappropriate Content
Message 4 of 7

Re: Integration IBM Websphere

Alex & Mike,


If one of you gents wants to 'bleach' a packet of any sensitive data I’ll gladly assist you with the process of developing and implementing a custom parser for that data source. To do so you’re looking at doing the following items:


-Develop the Regex to the

-Add data source

-Create new ASP Rule

The task is much less daunting after having done it for multiple Vendors and Device Types


R/

Jacob

Mikelb
Level 7
Report Inappropriate Content
Message 5 of 7

Re: Integration IBM Websphere

Hi Jacob

Thanks for the offer.  At this stage we have not yet added Websphere to our ESM - and don't have any sample logs as yet, it is just one of the many data sources we are looking to on board in the coming months.

Regards

Mike

Re: Integration IBM Websphere

Hallo,

I ask my McAfee / Intel-Security Salespartner if they plan to release this ASP. I still waiting for an answer.

Regards

Alex

Highlighted

Re: Integration IBM Websphere

Hi,

Any instructions on how to add the IBM WebSphere as a data source and parsing? 

Thanks,

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community