2 Replies Latest reply on Apr 10, 2014 9:44 AM by japie

    Mcafee NDLP - As a datasource in McAfee SIEM

    japie

      Hi Folks

       

      Has anybody integrated  McAfee NDLP with McAfee SIEM?

      In the documentation this looks like  straight forward syslog that needs to be configured to send the data to the SIEM receiver.

      We have configured exactly that way, confirmed no firewalls blocking anything but still not receiving any data.

       

      We have added the following appliances:

       

      NDLP Monitors

      NDLP Manager

      NDLP Discovery

       

      We are not receiving any data

       

      When I run a tcpdump on the receiver not receiving any syslog data from any of those devices.

       

      Both technologies on the latest version.

       

      Any idea what  we could be missing?

       

      Thanks,

      Japie