Cisco Firepower (eStreamer and eNcore)

234666

Cisco Partner

Cisco | Partner

Cisco Firepower Management Center Integration with ArcSight

0 reviews

602 downloads

Product compatibility

ESM

CATEGORY

Partner Integrations

Screenshots
Description
Suggested apps
Releases
Reviews

Have questions about this item?

Contact us
Subscribe to receive update notifications for this item
Subscribe

Description

The Cisco Event Streamer (eStreamer) allows users to stream Firepower intrusion, discovery, and connection data from a Firepower Management Center or managed device (i.e., the eStreamer server) to external client applications such as Micro Focus ArcSight. eStreamer eNcore CLI is a multi-platform, multi-process eStreamer client application written in Python that is compatible with FMC versions 6.0 and above. This integration enables users to gain valuable insights into the users, hosts, applications, files, mobile devices, virtual environments, threats, and vulnerabilities that exist in your constantly changing network.

Suggested apps

Endgame

Endgame

Endgame is the comprehensive endpoint security platform that prevents, detects, and responds to known and unknown threats at the earliest and all stages of the attack lifecycle. Endgame prevents breaches and transforms security analysts into Hunters.

SOC Prime SSL Framework for Arcsight

SOC Prime

SOC Prime SSL Framework combines the capabilities of Qualys SSL Labs and SIEM systems. As a result, this integration enables automatic tracking of the status of SSL certificates and web server security in the corporate domain.

Sysmon Framework

SOC Prime

Sysmon Framework is a set of rules and dashboards for the visualization of multiple security checks on Sysmon’s events on Windows hosts.

Indegy Industrial Cyber SecurityPlatform

Indegy

Indegy secures against operational disruptions caused by Cyber Threats, Malicious Insiders and Human Error, and ensures operational safety, continuity and reliability, by providing visibility and control to industrial control networks.

Palo Alto Networks Next-Generation Firewalls

Palo Alto Networks

This guide provides information for configuring the Palo Alto Networks next-generation firewalls for CEF-formatted Syslog event collection.

InQuest

InQuest

The InQuest platform focuses on capturing, identifying, processing, inspecting, and storing network content to detect and/or prevent malicious logic and/or sensitive information in transit.

Logstash ArcSight Module

Elastic

The Logstash ArcSight module enables you to easily integrate with the ArcSight Data Platform (ADP) to explore and visualize data in real-time with the Elastic Stack.

DNS Security Check

SOC Prime

DNS Security Check is a straightforward Use Case that easily finds DNS Misconfigurations and anomalies in network. Despite its maturity and long history, DNS protocol was not designed with security in mind and thus has many means of malicious exploitation.

EclecticIQ Platform Integration for Arcsight ESM

EclecticIQ

EclecticIQ Platform is a Threat Intelligence Platform that provides threat analysts, incident analysts, security analysts, fraud analysts, and risk analysts a comprehensive workspace for cyber threat management, analysis, and collaboration.

Releases

Release

Size

Date

Firepower Integration 1

878.6 KB

|

Sep 3, 2020

More info Less info

Product compatibility

ESM

Version 7.4 · 7.0 · 7.2 · 7.3

Version 6.8 · 6.9.1 · 6.11.0

Release notes

Version 1

Languages

English

Files

(878.6 KB)

Your browser is not supported!

Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox

release-rel-2021-5-1-4088 | Thu May 6 02:05:20 PDT 2021