

Step 1: Initial Power-Up and Configuration. Installation and Configuration of VM Images. This guide will discuss the requirements for both an Appliance-based POC as well as a VMware. This reduces the operational requirements of the customerĬonsiderably rack space (2u), power and network connectivity are dramatically reduced while stillīeing able to demonstrate the entire value proposition and superior performance of the McAfee Virtualized environment can be used to demonstrate one or more of the SIEM solutions, each being Some POC engagements may be satisfied using a virtual server configuration. Included in the evaluation, proper switch configuration must be provisioned in advance of the POC. Perform promiscuous traffic collection from a switch SPAN/Tap port. Require dedicated power, rack space and host network connectivity.Īdditionally, some of the SIEM platforms (ADM/DEM) require additional network connectivity to Request will be satisfied using one or more physical appliances.

When a POC is intended to demonstrate functionality as well as performance, it is typical that the Information was used to select the appropriate hardware delivered to satisfy the evaluation request. There are multiple products and configuration options that may need to be supported during a POC.Īn initial planning session was used to determine the scope and expectations for this project. Successful demonstration of the ease-of-use and rapid value delivered from the platform. It outlines the best practices to ensure a SIEM installation as part of an evaluation/proof of concept. This document is intended to provide a walkthrough of the steps necessary to complete a McAfee Security Information & Event Management Platform
