Integrate with other SIM products

(imported topic written by SystemAdmin)

I would like to know if I can integrate the below products with BigFix and if I can seamlessly input /output the data between BigFix and the following SIM products.

  1. ArcSight ESM

  2. Cisco MARS

  3. eiQNetworks SecureVue 2.5

  4. RSA/EMC enVision

  5. Symantec Security Information Manager SSIM 4.5

Thanks

(imported comment written by BenKus)

Hi Ani,

It is pretty straightforward to move data from the BES database into all the products you listed. This is normally done through direct database access or by spitting the BES data into a file that is imported by these types of products.

Do you have all these products? or are you trying to establish compatibility between BES and other products?

Ben

(imported comment written by SystemAdmin)

Acutally my customer is planning on purchase all the listed equimpent and would like to understand the compatilibity between them and BES. They love BES and want to make sure it integartes with all the other projects they are working on…hope it makes sense :slight_smile:

(imported comment written by SystemAdmin)

Actually would be nice if it could send syslog to RSA Envision

(imported comment written by nberger91)

Speak to sales, i had an ‘Arcsight Adapter’ developed, forwarding BigFix data to ESM via syslog in CEF format, works a treat !

(imported comment written by GRALLEN91)

Has the ArcSight Adapter been created as a tool to share? Where can I get a copy? :slight_smile:

(imported comment written by BenKus)

Hi Grallen,

Contact professional_services@bigfix.com for more info (there is some customization involved so you need to have a services project tied to getting the tool).

Ben

hi Benkus,

is there’s any valid email address where I can send my concern? I got bounced back email to professional_services@bigfix.com