NAC EVENTS to Thrid Party SIEM

  • 0
  • 1
  • Question
  • Updated 5 years ago
  • Answered
Does anyone have any hands on experience sending NAC events to a Mcafee SIEM receiver? It appears that everything is set correctly but I am not seeing events in my SIEM. Any help would be greatly appreciated.
Photo of Jimmy Payne

Jimmy Payne

  • 150 Points 100 badge 2x thumb

Posted 5 years ago

  • 0
  • 1
Photo of Kurt Semba

Kurt Semba, Employee

  • 1,366 Points 1k badge 2x thumb
Official Response
If you configure to forward all NAC end-system events within the Notification Engine in NAC Manager then you should see the events going out of the NetSight (!) appliance, not the NAC appliance.

If that still doesn't work, I'd suggest to open a ticket with GTAC so they can gather more data and fix your issue.

Thanks
Kurt