ArcSight Idea Exchange

Welcome to ArcSight Idea Exchange

This idea exchange is for submitting product enhancement ideas only. If you have a question about the product, please click on the “Discussions” tab above and post your questions there.

2022-01-21

Idea ID: 2872292

McAfee UCE

by Jananey Selvam in ArcSight

1 votes

Labels: APIs , Cloud , ESM

Status: New Idea
- New Idea on 21 Jan 2022
- 0 Comments
i need to integrate mcafee UCE to arcsight. please help on how i can do this
- Ideas Id :
2022-01-17

Idea ID: 2872268

smart connector for accellion MFT and superna`s ransomeware defender

by Leon Mayorov in ArcSight

1 votes

Labels: Connectors

Status: New Idea
- New Idea on 17 Jan 2022
- 0 Comments
https://dna-it.co.il/services/mft-solution/?gclid=EAIaIQobChMIx4qb0bu49QIVguJ3Ch1LZQmwEAAYASAAEgJrmfD_BwE https://www.supernaeyeglass.com/ransomware-defender
- Ideas Id :
2022-01-11

Idea ID: 2872224

Replicate Data in Active Lists Across ESMs using the Content Management Function

by TM in ArcSight

4 votes

Labels: ESM

Status: New Idea
- New Idea on 11 Jan 2022
- 0 Comments
Using the content management feature in ESM allow the data within the Active Lists to be copied to other ESMs. This would be helpful as it is Important to ensure that DR ESMs have the same data in their active lists as the primary ESM. Maintaining...
- Ideas Id :
2022-01-11

Idea ID: 2872217

Resolve issue with agent:029 "Agent cache dropped events"

by ianfitz1 in ArcSight

1 votes

Labels: Connectors

Status: New Idea
- New Idea on 11 Jan 2022
- 0 Comments
This event periodically fails to populate dcs2. Could you please take a look and resolve so it is always properly populated? Thanks, Ian.
- Ideas Id :
2022-01-07

Idea ID: 2872198

Add support for Oracle 19c and 21c database versions.

by maresj in ArcSight

1 votes

Labels: Connectors

Status: New Idea
- New Idea on 7 Jan 2022
- 0 Comments
- Ideas Id :
2021-12-14

Idea ID: 2872069

ArcMC Bulk Edit Agent Wrapper

by mcglynn1 in ArcSight

3 votes

Labels: ArcMC , Connectors

Status: New Idea
- New Idea on 14 Dec 2021
- 0 Comments
Be nice if there is a way to bulk edit the agent wrapper in ArcMC like you can bulk edit agent.properties.
- Ideas Id :
2021-12-09

Idea ID: 2872039

Endpoint alerts for the Defender ATP Connector

by Kyle Pearson in ArcSight

2 votes

Labels: Cloud , Connectors

Status: New Idea
- New Idea on 9 Dec 2021
- 0 Comments
Currently the defender ATP connector supports incidents but in some cases it would be good to be able to consume the alerts directly from the endpoints the below is actually taken from the Splunk integration with defender ATP but offers a description...
- Ideas Id :
2021-12-09

Idea ID: 2872037

cron jobs on master node of ArcSight DB

by Piotr K in ArcSight

2 votes

Labels: Recon , SODP (ADP)

Status: New Idea
- New Idea on 9 Dec 2021
- 0 Comments
On the primary node of ArcSight DB there have been a number of scripts and corresponding cronjobs (see the list below). The concern is that with all that placed on a single node single point of failure is created. Will multiplication of the cronjobs...
- Ideas Id :
2021-12-07

Idea ID: 2872022

Smart Connector for Tufin support

by TerrenceHsu in ArcSight

1 votes

Labels: Connectors

Status: New Idea
- New Idea on 7 Dec 2021
- 0 Comments
Smart Connector for Tufin support
- Ideas Id :
2021-12-06

Idea ID: 2872001

Voltage SecureData FPE encryption strength

by lincoln.thum@e- in ArcSight

1 votes

Labels: Content , Deploy & Arch.

Status: New Idea
- New Idea on 6 Dec 2021
- 2 Comments
Request to support of authentication and FPE encryption that meets SHA-384 standards
- Ideas Id :
2021-12-06

Idea ID: 2872000

HPE Secure Encryption strength for Appliance Model

by lincoln.thum@e- in ArcSight

1 votes

Labels: SODP (ADP)

Status: New Idea
- New Idea on 6 Dec 2021
- 2 Comments
G10 Appliance model, and HPE Secure Encryption feature for data at rest encryption, are generally comply with FIPS 140-2 standards, where the encryption standard is based on SHA-256. Request next generation of Logger appliance model should meet "FIPS...
- Ideas Id :
2021-12-06

Idea ID: 2871999

Cipher strength for Logger data file algorithm

by lincoln.thum@e- in ArcSight

1 votes

Labels: SODP (ADP)

Status: New Idea
- New Idea on 6 Dec 2021
- 1 Comment
Request for encryption of Logger data file support SHA-2 (SHA384) hash algorithm, including the "data validation" feature that could validate the data files with SHA384.
- Ideas Id :
2021-12-06

Idea ID: 2871997

SNMPv3 (SHA256 and SHA384 with AES256) for G10 appliance

by lincoln.thum@e- in ArcSight

1 votes

Labels: ArcMC , SODP (ADP)

Status: New Idea
- New Idea on 6 Dec 2021
- 1 Comment
Request to support Logger and ArcMC SNMP polling/trap up to SNMPv3 (SHA256 and SHA384 with AES256).
- Ideas Id :
2021-12-06

Idea ID: 2871996

SNMPv3 for Logger trigger alert - support for SHA-384

by lincoln.thum@e- in ArcSight

1 votes

Labels: SODP (ADP)

Status: New Idea
- New Idea on 6 Dec 2021
- 1 Comment
Request to have SNMPv3 destination to support SHA2 (SHA-384)
- Ideas Id :
2021-12-06

Idea ID: 2871995

SSL cipher and MAC support for Logger

by lincoln.thum@e- in ArcSight

1 votes

Labels: SODP (ADP)

Status: New Idea
- New Idea on 6 Dec 2021
- 1 Comment
For SSL/TLS CipherSuite/algorithm that is supported in transporting events (Secured SmartMessage) from Connector to Logger. Request for ArcSight Logger to support SHA384, specifically the following Cipher algorithms: ECDHE-ECDSA-AES256-GCM-SHA384...
- Ideas Id :
2021-12-01

Idea ID: 2871948

Custom Logo for ArcMC

by acappelli in ArcSight

1 votes

Labels: ArcMC

Status: New Idea
- New Idea on 1 Dec 2021
- 0 Comments
Allow for a custom Logo in ArcMC similar to the Logger
- Ideas Id :
2021-12-01

Idea ID: 2871947

Integrate MongoDB in ArcSight SIEM

by Saif Alamri in ArcSight

1 votes

Labels: Connectors , ESM

Status: New Idea
- New Idea on 1 Dec 2021
- 0 Comments
Request to Integrate MongoDB product in ArcSight SIEM to support us to monitoring MongoDB logs through SIEM
- Ideas Id :
2021-12-01

Idea ID: 2871946

Integrate the Cisco Unified CM Administration with ArcSight SIEM

by Saif Alamri in ArcSight

2 votes

Labels: Connectors , ESM , Investigate

Status: New Idea
- New Idea on 1 Dec 2021
- 0 Comments
Request to Integrate the Cisco Unified CM Administration product (SysloUDP) with ArcSight SIEM
- Ideas Id :
2021-11-29

Idea ID: 2871924

ArcMC ability to see cache in failover destinations from summary view

by ianfitz1 in ArcSight

4 votes

Labels: ArcMC

Status: Waiting for Votes
- Waiting for Votes on 8 Dec 2021
- 0 Comments
Hi there, ArcMC is great to allow you to see connector caches for all connectors in the System at a glance, and say, sort by max cache so you can quickly find issues. If however, a cache is present on a failover destination, but primary destination...
- Ideas Id :
2021-11-25

Idea ID: 2871905

CheckPoint Syslog - support for R81

by Naz Mal in ArcSight

2 votes

Labels: Connectors

Status: Accepted
- Accepted on 6 Dec 2021
- 1 Comment
According to the CheckPoint Syslog connector config guide - the connector supports versions R77.30, R80.10, R80.20, and R80.30 Can Product Manager/dev makes sure that the latest parser being released supports the version R81 and when will it be available...
- Ideas Id :

Menu

ArcSight

ArcSight Idea Exchange

Labels

Welcome to ArcSight Idea Exchange

McAfee UCE

smart connector for accellion MFT and superna`s ransomeware defender

Replicate Data in Active Lists Across ESMs using the Content Management Function

Resolve issue with agent:029 "Agent cache dropped events"

Add support for Oracle 19c and 21c database versions.

ArcMC Bulk Edit Agent Wrapper

Endpoint alerts for the Defender ATP Connector

cron jobs on master node of ArcSight DB

Smart Connector for Tufin support

Voltage SecureData FPE encryption strength

HPE Secure Encryption strength for Appliance Model

Cipher strength for Logger data file algorithm

SNMPv3 (SHA256 and SHA384 with AES256) for G10 appliance

SNMPv3 for Logger trigger alert - support for SHA-384

SSL cipher and MAC support for Logger

Custom Logo for ArcMC

Integrate MongoDB in ArcSight SIEM

Integrate the Cisco Unified CM Administration with ArcSight SIEM

ArcMC ability to see cache in failover destinations from summary view

CheckPoint Syslog - support for R81

Resources