1 Reply Latest reply on Apr 25, 2016 12:55 PM by andy777

    McAfee Web Gateway into ESM

    itgfcsys

      I cannot find any specifics on integrating the Web Gateway with the ESM/SIEM, so we've set it up as a data source using the ASP (syslog).

      We can see the logs coming into the receiver, and the receiver normally processing log files towards the other components

      I cannot see any events in the ESM

      Check ASP rules, all are enabled

      check DS name, IP, and host, all correct

       

      Anybody have this working and can provide a sample config

       

      Thanks in advance