1 Reply Latest reply on Aug 19, 2016 12:36 PM by syed_rizvi

    SIEM collector port definition

    kaluba

      how do i select/map a specific port from these range 49152-65535 tcp/udp,icmp for SIEM collector on a data source to which it will forward events to McAfee Event Receiver.

        • 1. Re: SIEM collector port definition
          syed_rizvi

          Go to Receiver properties > Receiver Configuration > Interface > Connection tab. Here you can defined MEF port used by SIEM Collector. As for the RPC port range you mentioned, its used by WMI. You can restrict it to port 135 by selection RPC check mark on the data source.