Hi Atul,
The full ports needed and Network architecture needed will be located in the below link:-
Network Architecture and Ports - RSA Security Analytics Documentation
If you need to integrate any event source using File collection, you will find a guide in the below link for each event source that is supported by RSA Security Analytics:-
RSA Supported Event Sources - RSA Security Analytics Documentation
File collection "sFTP" uses port 22 as it is a file transfer protocol over SSH. Port 22 needs to be opened for the event source to connect to the Log collector and upload the files.
There is also some steps you will find in SA Docs online that will help you configure file collection on SA UI. The below links will help you get started:-
File Collection Protocol Configuration Guide - RSA Security Analytics Documentation
Procedures - RSA Security Analytics Documentation
Install and Update SFTP Agent - RSA Security Analytics Documentation
You should follow the event source configuration guide for the event source you need to implement to implement the event source correctly.
Hope this helps!
Best regards
Khaled
