EPO 5.3.3 integration with QRadar SIEM

[syedali]

Hi All,

I'd need some suggestion/recommendation on Integrating EPO with Qradar SIEM. We've followed the following article  :https://www.ibm.com/support/knowledgecenter/SS42VS_DSM/c_dsm_guide_mcafee_epo_overview.html

What i need to know does Qradar Communicate to EPO SQL DB using SSL ? or will it work without SSL ?Should a certificate needs to be generated on the SQL server or on the Qradar ? 

Please advice

Thanks,

Syed

Thanks,

Syed

[Hawkmoon]

Hi syedali,

Your question should really be asked/posted to teh guys at Qradar, it is there product that you are using.

The dB (ePO or not) is hosted on SQL, it will be SQL and the 'product involved' that will define that. According to the URL you posted, it says:

You must enable this parameter if your connection supports SSL, even if your connection does not require it. This option requires extra configuration on your database and requires you to configure certificates on both appliances."

It reads to me that it is something you should setup, but please contatc the vendor for details and confirmation.