cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted

SIEM- Active Response

Hi everyone,

As you know , McAfee ESM 9.5.2 was announced. With this version includes active response module.

Does anyone has a change to use active response module on ESM?

If does, I'll be glad to hear integration experiences  and during the integration problems.

Thanks,

Best Regards,

Cagatay Kacar

7 Replies
Highlighted
Level 12
Report Inappropriate Content
Message 2 of 8

Re: SIEM- Active Response

Highlighted

Re: SIEM- Active Response

Thank you xded for your reply.

But I m getting that kinda error on ESM console.

On ePO side there are many collectors. But I can not see on ESM console.

There is nothing between ePO and ESM.

what am I supposed to do?

AR_collector_error.png

Highlighted
Level 12
Report Inappropriate Content
Message 4 of 8

Re: SIEM- Active Response

Do you have the Modul in the ePo? Do you have the Active Response Collector installed?

Highlighted

Re: SIEM- Active Response

Yes, they already installed.

Highlighted
Level 12
Report Inappropriate Content
Message 6 of 8

Re: SIEM- Active Response

Did you a refresh on the ePO Datasource if you installed a module in the ePo you need to refresh the Datasource.

Click on the ePO in SIEM --> Properties --> Device Management --> Refresh

Over this level i cant help you sorry. 

Highlighted

Re: SIEM- Active Response

check this doc:

Highlighted
Level 10
Report Inappropriate Content
Message 8 of 8

Re: SIEM- Active Response

Hi,

You should try 9.6 version (it is available now)

In my test lab everything works as it should:

Collectors.PNG

In 9.5.2 I had the same error as you.

Regards

M

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community