gruwell@hpe.com1 Regular Contributor.
Regular Contributor.
1524 views

Can someone tell me what the difference between CEF0.1 and CEF1.0 is?

Jump to solution

I have been searching for a while now trying to find something that describes what changed between the two formats but I haven't had any luck.

0 Likes
1 Solution

Accepted Solutions
Super Contributor.. lybinhlap Super Contributor..
Super Contributor..

Re: Can someone tell me what the difference between CEF0.1 and CEF1.0 is?

Jump to solution

Hi gruwell@hpe.com1,

CEF 0.1 only supports IPv4 while CEF 1.0 supports both of them. You can check  SmartConnector User Guide to deeply understand. 

https://community.softwaregrp.com/t5/ArcSight-Connectors/HPE-ArcSight-SmartConnector-User-Guide/ta-p/1586784?nm

Regards,

Lap

Never give up

View solution in original post

3 Replies
Super Contributor.. lybinhlap Super Contributor..
Super Contributor..

Re: Can someone tell me what the difference between CEF0.1 and CEF1.0 is?

Jump to solution

Hi gruwell@hpe.com1,

CEF 0.1 only supports IPv4 while CEF 1.0 supports both of them. You can check  SmartConnector User Guide to deeply understand. 

https://community.softwaregrp.com/t5/ArcSight-Connectors/HPE-ArcSight-SmartConnector-User-Guide/ta-p/1586784?nm

Regards,

Lap

Never give up

View solution in original post

gruwell@hpe.com1 Regular Contributor.
Regular Contributor.

Re: Can someone tell me what the difference between CEF0.1 and CEF1.0 is?

Jump to solution

So it is really just about adding ipv6 support? I searched the connector user guide but I don't see it mentioned there.

0 Likes
Highlighted
dcorwin25 Honored Contributor.
Honored Contributor.

Re: Can someone tell me what the difference between CEF0.1 and CEF1.0 is?

Jump to solution

Something very important to note is that if you have CEF_v.1.0 enabled on a destination, you will not able to forward any events from that destination to ESM. They may have resolved this issue in the patched version of ESM 6.11 but I'm not sure.

The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.