You'll need to use scp to copy the files over ssh.
thanks for your response ,
Can you give me detailed steps on how to do that ?
If you can still ssh(you've added a pubkey for auth) to the machine you this KB: McAfee Corporate KB - Information required to retrieve the ESM NGCP password KB74811
If you didn't add a pubkey you will need to boot from an USB/CD device and retrieve the files: McAfee Corporate KB - How to use a USB drive as a rescue CD to mount the SIEM/Nitro file system KB81840