Syslog Forwarding from McAfee ePO

[Mike Riforgiate]

On the ePO server:

1. Configure your ePO server to use the newly created syslog server:
   • Add a new Registered Server and select Syslog for the type.
   • Enter the FQDN of the WitFoo Appliance.
   • Enter 6514 for the port
2. Select Enable event forwarding.
3. Click Test Connection.
4. Flip back over to the WitFoo “Search” interface and search for the IP address of the McAfee ePO server. An entry should be listed on the Syslog tab.
5. On the ePO server, click Save to save the syslog Registered Server.

Reference: https://kc.mcafee.com/corporate/index?page=content&id=KB87927

[Author]

Posts