Symantec AV 11.0.6

[RSAAdmin]

Has anyone generated support for Symantec AV 11.0.6 as it is yet to be supported in 3.7 or 4.X

The following are supported:

9.0, 10.0, 10.1, 10.2 (versions 10.1 and 10.2 are supported on RSA enVision 3.3.2 and later), 11, and 11.0.5.

Any assistance is appreicated

Glenn

[RSAAdmin]

Hi,

We have been looking at SEP v11.0.6 and have configured it to syslog to enVision and appears to be working fine.

I hope this helps.

[RSAAdmin]

Can you share the method?

Thank you

Glenn

gwilliamson@sentrymetrics.com

416-488-2323 x112

[RSAAdmin]

Just use the device configuration guide. (Attached to post)  I am pretty certain that there were no changes from 11.0.5 to 11.0.6 that impacted Envisions ability to properly parse the messages

[RSAAdmin]

Yes this is exactly what I used on 11.0.6 version and worked fine.

[RSAAdmin]

Thanks, will see if it works.

cheers

[RSAAdmin]

Mike

Thanks for verification that it worked. Based on 2 for 2 will move forward with it and test.

Cheers

Glenn

[RSAAdmin]

Any idea to integration of  Symantec client directly send logs RSA.