1 Reply Latest reply on Oct 26, 2016 4:33 AM by abanaru

    Can I deploy remote ERC's which has no connection to an ESM?


      I have remote sites with no connectivity back to my master site. I wish to deploy an ERC into these sites run it for a while 2-3 weeks then bring it back to my min site to investigate the logs. I read that every McAfee SIEM deployment has to have at least one ESM, does that mean I must deploy an ESM in each of the remote sites or can I just deploy an ERC and bring this back and connect it to an ESM at my main site?