Support via Micro Focus Software Support, with a ticket filed against the associated product.
Micro Focus offers a content partnership program for select partners. Support for Partner Content offerings is provided by the partner and not by Micro Focus of the Micro Focus community.
Micro Focus Community Content is provided by Micro Focus for the benefit of customers, support for it is not available via Micro Focus Software Support but through specific community content forums.
Community Contributed Content is provided by Micro Focus customers and supported by them.
The Illumio Adaptive Security (ASP) is a software system that secures any computing platform (bare-metal servers and virtual machines) in any environment (enterprise data center, Amazon Web Services, Google Compute Engine, Microsoft Azure, OpenStack, etc.) without any dependency on the underlying network.
Illumio ASP enhances the value of Micro Focus ArcSight by providing additional data and context about your environment. This information improves ArcSight’s ability to detect threats before they do damage, enhance reporting, and help you resolve issues faster.
The Illumio PCE generates Traffic and Audit events in CEF format. Micro Focus has tested these CEF events to ensure accuracy and format compliance, enabling ArcSight customers to seamlessly utilize the rich data generated by Illumio PCE.
Type of Integration: Inbound CEF
This guide provides information for configuring the Illumio Policy Compute Engine (PCE) integration for ArcSight ESM. This integration is supported on ESM versions 7.0 and later. Illumio PCE version(s) 19.3 and later supported
ArcSight Configuration Guide 17.3
ArcSight Configuration Guide 16.9
Related content and resources
Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox