Administrators can integrate RSA NetWitness Platform with RSA Archer Cyber Incident & Breach Response to send alerts and incidents from NetWitness Platform to Archer for incident management and remediation. This guide provides a high-level workflow for configuring this integration.
Note: When you upgrade from Security Analytics 10.6.5 to NetWitness Platform 11.x, the RSA Archer Cyber Incident & Breach Response integration is no valid, and must be re-configured.
The following table list the NetWitness Platform 11.x integration options with RSA Archer Cyber Incident & Breach Response Version 1.3.1.2.
RSA Archer![]() | NetWitness Platform 11.x Integration | Reference |
---|---|---|
1.3.1.2 | ESA Correlation | See "Configure ESA Correlation for Integration with RSA Archer |
1.3.1.2 | Reporting Engine (RE) | See "Configure Reporting Engine for Integration with RSA Archer![]() |
1.3.1.2 | Respond | See "Configure Respond for Integration with RSA Archer |
1.3.1.2 | Archer Feeds | See "RSA Archer Feeds" section. |