This package handles events from the SmartConnector for ArcSight CEF Cisco FireSIGHT Syslog so they can be used in the Network Monitoring and the Perimeter Monitoring packages.
This is a replacement for the earlier P-Sourcefire package to fix reference overlap issues with the Snort package it was derived from. If using this package to replace the P-Sourcefire package, follow the instructions to delete the old filter references and delete the old package.
Suggested for you are based on app category, product compatibility, popularity, rating and newness. Some apps may not show based on entitlements. Learn more about entitlements.
The filter All Sourcefire Events now requires that the events be Base or Aggregated. This will keep rules using this from having to add conditions to avoid Correlation events.
The package also includes an installation script.
Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox