Video Screencast Help
Search Video Help Close Back
to help

Milan_T

Member Profile

Milan_T Partner

Status: "You block your dream when you allow your fear to grow bigger than your faith." - 03 Mar 2013
Contact: Send this user an email
Job Title: Symantec Sequrity Operations
Member for: 1 year 16 weeks
Contribution Stats
4
Solutions
16
Forum Threads
110
Comments
2
Blog Entries
3
Ideas
0
Articles
0
Videos
0
Downloads
0
Events
4
Groups Joined

Milan_T's Activity

Show:
discussion comment 23 May 2013
Milan_T commented on: Backup agent license
thnx all for kind support. We have communicated with License department and found record of  applied license. After that we could apply on formated server.
New forum discussion 21 May 2013
Milan_T posted: Backup agent license
Hi all,   I have one linux system on which we have SAN backup agent installed for backup and recovery of data. Before few days server was formated and backup required to reinstall. Now haw can i recover my license or it is not possible to recover ...
discussion comment 21 May 2013
Milan_T commented on: [SSIM] Collecting Events from IBM DataPower (WebSphere) XI50
Hi pottolino,   We have colector available for Websphere product. But please conform can websphere send logs to remote system directly or not. If it can send than let me know the procedure.
discussion comment 21 May 2013
Milan_T commented on: SSIM Advanced Query How to ?
Hi Alessio D'Ospina,   You may want to extact top ten denied traffic to reduce malicious / unwanted internal traffic on firewall. First step you need to do is to create query like below (Product ≠ Symantec Endpoint Protection ...
discussion comment 15 May 2013
Milan_T commented on: what's permission for Edit Advanced SQL Query
One more you can do is first export existing query in .qml format.   Open in text editor. edit and import to SSIM
New blog entry 09 May 2013
Milan_T posted: SSIM centralized event monitoring and unbeatable part of ISMS
IT is tagged as a burden on business with huge annual expenses. On the other hand businesses today face a considerable challenge to deliver ever-improving service levels to meet and exceed the expectations of their business users for service quality, ...
discussion comment 06 May 2013
Milan_T commented on: SSIM receiving log that is not syslog format
Also Syslog format? Syslog is a demon used to manage error, info, emargency type of logs. Syslog demon is responsible for logs but logs type is not created by syslog. Always syslog writes events in a file located in /var/log/* you may change ...
article comment 06 May 2013
Milan_T commented on: Monitoring Non Logging Assets/Servers-Part 2
If you have offbox servers to capture windows logs you can check by scheduling report for no logs also. Just create query and make unique by collection device ip, Select coloumn only collection device host. Go to report tab and schedule report ...
discussion comment 03 May 2013
Milan_T commented on: Need to know WebSphere application integration with SSIM
Hi Experts,   I have websphere app lay on AIX OS. I want to install Agent and collector on AIX box, But agent is not supported by AIX OS. SSIM Collector: websphere_3.5.0 (1) SSIM Agent: Linux 4.7.1 Please help me also if agent is ...
discussion comment 02 May 2013
Milan_T commented on: Resetting the password for the Domain Admin Account for CCS 10.5
Hi Matt Plourde,   Good document to reset password in CCS and RMS.
discussion comment 01 May 2013
Milan_T commented on: Loopback address is shown while using Windows Event Collector on a workgroup machine
You have configured on box integration and used localhost as monitored hostname. I think uou have configured many workgroup systems using single sensor. Now for internal communication logs it will show local host instead of host name. You can ...
discussion comment 01 May 2013
Milan_T commented on: what's permission for Edit Advanced SQL Query
Hi Luis_souza,   Yes you need admin access to edit SQL queries. Normal user do not have permissions to edit SQL queries in SSIM.
discussion comment 01 May 2013
Milan_T commented on: Need detailed instuctions for integrating McAfee Secure Web Gateway to SSIM
Hi SOURCERPLUS,   You can not directly integrate Mcafee web gateway with SSIM. One you can do by Mcafee Epo server. Or you can costomize Mcafee web gateway to send logs to SSIM compliance, in this SSIM will store events as generic syslog ...
discussion comment 01 May 2013
Milan_T commented on: SSIM receiving log that is not syslog format
One it must be accepted by SSIM. Secondly collector must be available it you want to take advantage of correlation. Third probleam you might face is special charactor or SSIM must understand when to break and generate new event.
discussion comment 01 May 2013
Milan_T commented on: Configuring MS Vista off-box Collector for Windows Server 2008 R2 - http only
Hi nadeemvirk,   You can integrate stand alone / DMZ servers with SSIM. But for stand alone server it must be connected with network, Second thing you need to do is create local user rather than AD user and basic authentication ...
discussion comment 01 May 2013
Milan_T commented on: SSIM - Customizing WMI query in a "Collector\Microsoft_Windows_Event_Collector_4.3.30_AllWin_EN"
Hi minfo,   You have windows user created on base win OS or AD ID is added to event log reader group and having some explicity permissions to fetch logs. Now that user's encryped credentials has been applied on sensor with that ...
discussion comment 01 May 2013
Milan_T commented on: How to custom rule for SSIM windows account locked?
I aggery with Laszlo2. Just consider 500 ID gets locked out a day then seporate 500 incidents will generate. What will hapen for more than 1000 events and more than that screen will display one type of incidents.
discussion comment 20 Apr 2013
Milan_T commented on: Unable to integrate 2k8 R2 with SSIM.
Thanx olaf, We will open a case with Microsoft tech support. This was issue from OS and that's why we could not integrate with SSIM.
discussion comment 18 Apr 2013
Milan_T commented on: Maximum EPS per Agent/Collector?
Their is no specific limit of EPS in SSIM. What the maximum EPS  per one OFF BOX collector?  I have seen more than 1500 EPS on one OFF BOX collector and it may be more than that. And what the maximum EPS per one AGENT? It must be ...
discussion comment 18 Apr 2013
Milan_T commented on: Unable to integrate 2k8 R2 with SSIM.
Dear Olaf, output of given command was as below. C:\Users\Administrator>wevtutil el Application HardwareEvents Internet Explorer Key Management ...