1 Reply Latest reply on Apr 25, 2016 12:55 PM by andy777

    McAfee Web Gateway into ESM


      I cannot find any specifics on integrating the Web Gateway with the ESM/SIEM, so we've set it up as a data source using the ASP (syslog).

      We can see the logs coming into the receiver, and the receiver normally processing log files towards the other components

      I cannot see any events in the ESM

      Check ASP rules, all are enabled

      check DS name, IP, and host, all correct


      Anybody have this working and can provide a sample config


      Thanks in advance