IPDB Extractor Integration with RSA Security Analytics

[Anonymous]

Hello All,

              I want to integrate my enVision IPDB with RSA Security Analytics.

But I am facing few challenges during this, so I prepared one document the steps which I followed.

Kindly suggest on this if someone have a idea regarding the same.

Thanks to all in advance.

[Anonymous]

Hello All,

              Have any one idea regarding this, as I uploaded a document which shows what steps I followed during the IPDB extractor service creation on both enVision & on SA box.

The challenge I am facing is to mount the enVision with SA and the other one is to add the IPDB Extractor device in the SA.

Kindly suggest.

Thanks to all in advance.

[RSAAdmin]

Hi Deepanshu,

Could you let me know the contents of the below folders :

     /var/netwitness/ipdbextractor/ipdb 

     &

    /var/netwitness/ipdbextractor/devicelocation/global/local/directory/

This will help me understand if the mounts are correct.

Also you can add IPDBExtractor service to SA only when its up. Could you send across the log file - /var/log/messages (IPDBExtractor Box)

[Anonymous]

Attached is the output of the commands.

[RSAAdmin]

Did you install cifs-utils?

cmd : yum install cifs-utils

[Anonymous]

Hello Neha,

I hadn't done the installation of it.

Now I am able to mount and add successfully the IPDB Extractor with SA.

Thanks for your support.

[RSAAdmin]

Great!

Here is the link to the doc which can help you with the installation process.

Mount the IPDB - RSA Security Analytics Documentation