Hello All, I was not able to find event source configuration guide for
integrating Proofpoint TRAP to RSA Netwitness. Please let me know if
there are any documentation about this integration. Thank you
Thank you Jacob. We still using 10.6 soon moving to 11.x I will explore
other options as you mentioned. Let you guys know any updates. Thank you
all for the quick responses.
I'm not 100% sure, but I don't think Airwatch uses CEF. Pending their
reply. Now, Airwatch is configured to send the logs to the log
collector, but once we test the connection, it fails. Any ideas? Could
be that port 514 is not enabled in LC?