9 Replies Latest reply on Dec 20, 2013 1:15 AM by mmuz

    What kind of network flow does McAfee SIEM support?

    parinya.ekparinya

      What kind of network flow does McAfee SIEM support?

       

      Refer to device support list I got from local SE (last update on November 2012), McAfee SIEM support following network flow:

      • Netflow (using NitroFlow NetFlow Collector)
      • Citrix AppFlow (it said "custom" but I have no idea what's the customization required?)
      • IP Fix (again "custom" what kind of custom needed?)
      • sFlow (using NitroFlow NetFlow Collector)

       

       

      Here are my questions

      1. How about Juniper J-Flow & rFlow? Does McAfee SIEM support them?
      2. Are there any limitations regarding network flow collecting? e.g. licensing, performance or even need dedicated port on receiver.
      3. Does one flow count as 1 EPS?

       

      Best regards,

       

      Parinya