000024168 - Bandwidth for Collecting Windows Events

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000024168
Applies ToenVision
IssueImplementation of the Microsoft protocol causes increased traffic when collecting Windows messages. enVision? uses the same protocol used if running the Windows Event Viewer and connecting to a remote machine.
ResolutionReduce the bandwidth by using third party agents, such as Intersect Alliance's Snare agent, to send the Windows events to the enVision server.
Legacy Article IDa36787