McAfee Event Receiver
Easy, highly distributed deployment collecting up to 20,000 events per second

Overview:

McAfee Event Receiver appliances are responsible for the collection of log and event information from hundreds of third-party devices including firewalls, IDS/IPS devices, UTMs, switches, routers, applications, servers and workstations, identity and authentication systems, vulnerability assessment scanners, and more. McAfee Event Receiver uses a variety of collection methods including passive log collection, authenticated log collection, CEF, OPSEC, SDEE, XML, ODBC, as well as an encrypted collection validated to FIPS 140-2 Level 2.

Robust collection, powerful correlation — When a McAfee Event Receiver collects an event, it parses all relevant details into a fully normalized event taxonomy, and then provides full correlation against all events to detect larger incidents. McAfee Event Receiver correlates events collected by other distributed receivers for system-wide threat detection.

Flexible collection architecture — McAfee Enterprise Security Manager supports fully centralized “all-in-one” event collection and management, or fully distributed event collection using dedicated Event Receiver appliances, rated for several thousand to tens of thousands of events per second.

High reliability — Deploy McAfee Event Receiver redundantly for maximum reliability without any risk of data loss.