Best practises on Tripwire IP360 integration
I'm interested to hear from your best practises on the possibilities (what works) and also limitations (what doesn't work) when integrating the ip360 Tripwire VM solution with ArcSight ESM.
1. In particular when operating this in a multi-tenant architecture, do you recommend to use one SmartConnector for each tenant, or can you serve multiple tenants at once?
2. Interactive over automated mode?
3. Any topology caveats e.g. what is the recommendation to have the fresh scan data "merged" with the existing topology information?
Many thanks for sharing your views on this
Re: Best practises on Tripwire IP360 integration
I'm working on the design so no immediate hands-on planned. Do you have experience with the feed onboarding from IP360 to ArcSight? It sounds to me that you have or at least have plans to do it...