1 Reply Latest reply on Jul 14, 2015 10:02 AM by Troja

    Integrating SAE with TIE

    lmcashen

      I see this from an SAE release notes doc-

      https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/ 25000/PD25559/en_US/SAE_3%205_HF1003291.pdf

      Release notes for v3.5.0.1204 with HF 1003291-

      McAfee

      SiteAdvisor

      Enterprise can now send Global Threat Intelligence (GTI) reputation of websites to McAfee Threat

      Intelligence Exchange (TIE) using the McAfee Data Exchange Layer (DXL).

      Resolution: Install this hotfix to implement the update on your McAfee SiteAdvisor Enterprise.”

       

      I can’t find any other info on this, and I don't see any policy settings or queries for web site reputations in TIE. Any info is appreciated

        • 1. Re: Integrating SAE with TIE
          Troja

          Hi,

          i tested this. You have to use SAE 3.5 P2 with this hotfix. You see no additional policy setting in EPO. After installing the HF SAE is just talking to TIE Server.

          You can test bis by executing a file directly from Dropbox. This worked in my Environment and the URL was visible under TIE reputations.

           

          Two hints or Special behavior.

          - Not any file showed the URL Information. I do not know why. :-/

          - From my Point of Information you MUST use Patch 2. Patch 3 will not work with DXL.

           

          Hope this helps,

          Cheers