2 Replies Latest reply on Apr 10, 2014 9:44 AM by japie

    Mcafee NDLP - As a datasource in McAfee SIEM


      Hi Folks


      Has anybody integrated  McAfee NDLP with McAfee SIEM?

      In the documentation this looks like  straight forward syslog that needs to be configured to send the data to the SIEM receiver.

      We have configured exactly that way, confirmed no firewalls blocking anything but still not receiving any data.


      We have added the following appliances:


      NDLP Monitors

      NDLP Manager

      NDLP Discovery


      We are not receiving any data


      When I run a tcpdump on the receiver not receiving any syslog data from any of those devices.


      Both technologies on the latest version.


      Any idea what  we could be missing?