After EDR Upgrade to version 4.8 unable to forward Logs to SIEM
search cancel

After EDR Upgrade to version 4.8 unable to forward Logs to SIEM

book

Article ID: 269714

calendar_today

Updated On:

Products

Endpoint Detection and Response

Issue/Introduction

Siem is not receiving logs after EDR update version 4.8

Cause

UPD protocol is no longer supported for SIEM integration

Resolution

EDR Version 4.8 accept TCP protocol for SIEM integration.

EDR 4.8 Release notes
https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-detection-and-response/4-8/what-s-new-in-4-3-v131146855-d38e74614.html