Forum Discussion
Solved
ATA Gateway SIEM Integration
Hi, From my understanding, ATA Gateway can be fed in three different ways: -Port Mirroring -SIEM -WEF Then, if you are using the lightweight Gateway, you do not need Port Mirroring or WEF,...
If you are running all Lightweight GWs > 1.8 , there is no additional value in incoming SIEM traffic.
ATA will read all the needed events locally.
SIEM has additional value in standalone GWs scenario, or in older version of ATA where we did not read event locally.
EliOfek
Microsoft
MicrosoftIf you are running all Lightweight GWs > 1.8 , there is no additional value in incoming SIEM traffic.
ATA will read all the needed events locally.
SIEM has additional value in standalone GWs scenario, or in older version of ATA where we did not read event locally.