We receive no logs from the ePo Console

[RSAAdmin]

Hi,

We’ve trying to integrate a Mcaffe ePolicy console v 4.0 with RSA enVision but right now we can only receive system events and nothing about alerts o security logs.

Previously you have told us that we needed to migrate to version enVision v.4.0 cause that was the only way to make a successful integration but we migrated version past Friday and the problem persist.

We followed every step as you mention on your integration guide with no real success.

Hope you can tell us what else do we need to do or if theres something that we haven’t done yet.

This is an example of one of the logs that we got on the enVision:

8

2011/03/01 00:03:00.030 CST

172.16.149.33

%NIC-6-508100: Packager, Packager, -, -, -, -, Detail: 5472: Device 172.23.250.21 (epolicy): 0 messages processed

And i like to show you that the ODBC conector is working properly (I atached picture)

Hope you can tell us if theres something that haven't done yet or if theres something wrong with the procedure that we followed.

Best Regards...

JD

[RSAAdmin]

JD, is that the only logs you are getting in envision for McAfee ePO? Did you follow the document for device configuration? How many mcafee agents do you have?

[RSAAdmin]

Hi dnoy,

Thank for your response. Yes, we followed the document for device, but it wasn't the problem.

We already receive logs from ePO now, the problem was the account that ePO administrator gave us, beacause this not had access to all Database tables.

Thanks,

JD

[RSAAdmin]

Hello There, I am experiencing a similar issue. Can you tell me what are the required SQL permissions the RSA user must use? Thank you, Dov

[RSAAdmin]

Hi dbrajtman, Just need an account: read only, but this account must have access to all tables in the ePO SQL database. Best Regards, JD