dilipma19801 Absent Member.
Absent Member.
223 views

Integration of Imperva VA feed with Arcsight

HI ,

Could anyone pls suggest whether its possible to integrate the Imperva VA assesment data(feed) with Arcsight.If possible what type of smart connector needs to configure.

/Dilip

Labels (2)
0 Likes
4 Replies
Acclaimed Contributor.. Volker Michels Acclaimed Contributor..
Acclaimed Contributor..

Re: Integration of Imperva VA feed with Arcsight

Hello Dilip,

what is VA?

Can't find anything about it via Google.

For Imperva Feeds we usually use simple syslog connector.

Volker

0 Likes
mike_of_many Trusted Contributor.
Trusted Contributor.

Re: Integration of Imperva VA feed with Arcsight

Dilip,

Agreed, what are you referring to as the Imperva VA assessment data? Do you mean the integration Imperva has to ingest Vulnerability data and suggest/activate WAF signatures on the vulnerabilities. In effect virtual patching?

Or are you looking for something else like with the Imperva DB audit scans?

Mike

0 Likes
dilipma19801 Absent Member.
Absent Member.

Re: Integration of Imperva VA feed with Arcsight

Hi Mike,

I want DB assessment scan data to be forwarded towards arcsight through syslog & to do so we can define syslog action set.But there is no such syslog action set available to get the DB assessment scan data to be fwd @  arcsight connector....

so is there any way to get the assessment data through syslog or can deploy the arcsight connector on WAF to capture the DB VA data feed.

/Dilip

0 Likes
mike_of_many Trusted Contributor.
Trusted Contributor.

Re: Integration of Imperva VA feed with Arcsight

Dilip,

Thanks for clarifying. Let me think and work within Imperva on this idea.

Basically your looking at an asset /data enhancement feed like vulnerability scanner results. Some of which I know work as file readers to get the data into Arcsight.

Mike

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.