Bluecoat Solera Integration with RSA Log Solution

[MohdSaadKhan]

Hi All,

Can anyone suggest the method for integrating bluecoat Solera solution with RSA netwitness Log solution.

[SravanKoneti1]

Hi Mohd Saad,

I believe, Solera is now Symantec Security Analytics. you may need to configure syslog settings to send logs to Netwitness. If it falls under parsing issue, Please share sample logs to RSA support.

https://symwisedownload.symantec.com//resources/sites/SYMWISE/content/live/DOCUMENTATION/10000/DOC10415/en_US/SA_7.2.3_a…  

[MohdSaadKhan]

Hi

Yes now it is Blue Coat Security Analytics. And I don't want syslog or log from the Blue coat device for monitoring but want to integrate with Blue Coat through API using context menu action or any other app so that I can put my search of RSA investigation into blue coat.

Secondly I have created for single meta search through context menu action. But customer want queries search (source IP >destination IP > port) @ Blue coat . For example  you can see for Qradar and Blue Coat integration : Blue Coat Security Analytics Integration With IBM QRadar - YouTube 

Similarly want to create for RSA.