5 Replies Latest reply on Feb 19, 2015 7:05 AM by xded

    SIEM

    dharmarajsonawane

      Hello Everyone,

       

      Can any one tell me how to check the ports which are in listening on the machine where the McAfee SIEM is installed?

       

       

      Thanks,

        • 1. Re: SIEM
          xded

          I know only this one -->

          Ports.png

          Receiver Properties --> Data Sources --> Add --> Interface --> Communication

          • 2. Re: SIEM
            dharmarajsonawane

            Thank you ..

             

            Actually i was installed the .OVF file of McAfee SIEM. and now i am not able to check the services which are enabled or port number which are listening.

             

            i was trying to access it by using ssh but failed.

             

            Please suggest me any other way to take access of that machine. for checking the services and the ports used on that system.

             

            Thanks

            • 3. Re: SIEM
              xded

              Hi,

               

              i have installed to, but i can access via ssh on port 22 or via HTTPS. Which service do you want to check? Bad question but do you set the IP, Subnetmask and Gateway right? Look on your virtual maschin and check this settings.

               

              Here a picture of the configuration menu

              ovf-siem.png

              regards

              • 4. Re: SIEM
                dharmarajsonawane

                Hi xded,

                 

                I was already done all the settings with my VM. like IP assignment,ACL clearing,Communication port assigning.

                 

                And i can able to access it by using the HTTPS through browser. But i cant check the system setting or not able to made any changes on system.

                 

                I was tried to access system by using SSH but failed. so suggest me if you have any solution regarding to this.

                 

                 

                 

                Thanks,

                • 5. Re: SIEM
                  xded

                  I'm sorry my fault i didn't understand...

                   

                  You can take on or off in the SSH connection in the System properties on the top right. Than Network Settings and than Main.

                  ssh.png


                  Another way is the ESM virtual maschine

                   

                  ESC -> MGT IP Conf -> Comm Port Change to 22.

                   

                  If you enable SSH on the initial configuration, you can disable the ssh Connection in the Webbrowser. If not you can Change the Setting in the Brwoser.