This quick start guide will help Accenture Security customers configure McAfee® Network Security Manager (NSM) Intrushield to allow log collection from the Log Collection Platform (LCP).
The guide details the CLI configuration process. Please refer to the vendor document for more information on the GUI configuration.
This document includes the following topics:
A list of supported versions is available in the Accenture Security Supported Products List document (Accenture_MSS_Supported_Products_List.xlsx) which can be found at
Accenture Portal - https://mss.accenture.com/PortalNextGen/Reports/Documents
|LCP||McAfee NSM Database||3306 (TCP)||Default database port|
To configure McAfee NSM Intrushield with MySQL database, follow the steps below.
Login to MySQL CLI as an administrator by doing one of the following steps:
For Unix-based Operating Systems (OS), at the Unix prompt, enter the following command:
mysql -u root -p
For Windows OS,
Go to Start > All Programs, right-click Command prompt, and select Run as administrator.
In the Command Prompt window, navigate to the MySQL installation folder and enter the command:
mysql -u root -p
Run any database shell that works with MySQL. For example: SQuirreL SQL client and MySQL Workbench (Query Browser).
Type the password for the root account.
To assign read-only permission to a user, enter the following command:
If the collector is installed on the same host as the database then type the command:
grant select on <database_name> * to '<readonly_user_name>' identified by '<password>';
To give access to a specific host, type the command:
grant select on <database_name> * to '<readonly_user_name>' @ '<LCP IP Address or DNS resolvable hostname>' identified by '<password>';
To give access to any host, type the command: grant select on <database_name> * to '<readonly_user_name>' @'%' identified by '<password>';
To reload the grant table, type the command:
Sample Command Output
mysql> grant select on dbname.* to 'readonly_user_name' @ '%' identified by 'pogo$23';
Query OK,0 rows affected (0.11sec)
mysql> flush privileges;
Query OK, 0 rows affected (0.00sec)
The read-only database user that is created must have read-only access to the following tables:
Note: Disable “alert suppression settings" in the IPS Alerting option.
The database URL string that needs to be configured on the collector by MSS.
Note: If the database is configured to use a different port number, please advise the MSS onboarding team.
The username mentioned in the Pre-Installation Questionnaire (PIQ).
The password mentioned in the PIQ.
Copyright © 2020 Accenture. All rights reserved.
Accenture, the Accenture Logo, and DeepSight Intelligence are trademarks or registered trademarks of Accenture in the U.S. and other countries. Other names may be trademarks of their respective owners.
The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Accenture and its licensors, if any.
THE DOCUMENTATION IS PROVIDED "AS IS" AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. ACCENTURE SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE.
The Licensed Software and Documentation are deemed to be commercial computer software as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19 "Commercial Computer Software - Restricted Rights" and DFARS 227.7202, et seq. "Commercial Computer Software and Commercial Computer Software Documentation," as applicable, and any successor regulations, whether delivered by Accenture as on premises or hosted services. Any use, modification, reproduction release, performance, display or disclosure of the Licensed Software and Documentation by the U.S. Government shall be solely in accordance with the terms of this Agreement.