2 Replies Latest reply on Jul 10, 2017 3:48 PM by sssyyy

    What is the performance downside of indexing all ports?


      The McAfee SIEM is configured, by default, to index only ports 1-1024.  Non-indexed ports do not show in searches.  McAfee best practice is to enable indexing for all ports. 


      What is the downside of enabling indexing for all ports?