Applies To: McAfee IntruShield Security Manager Version 4.1 and later.
EventTracker supports McAfee IntruShield IPS and it can be configured to send syslog to Event Tracker Enterprise.
Event Tracker Knowledge Pack for McAfee IntruShield IPS allows you to monitor following:-
Once logs are received in to EventTracker, Alerts and reports can be configured into EventTracker.
Some of the Knowledge Packs available in EventTracker are listed below. For more information please refer Integration Guide.
The configuration details are consistent with EventTracker Enterprise version 7.X and later, and McAfee IntruShield IPS,IntruShield Security Manager Version 4.1 and later.
For more information please refer to the Integration guide.