CB Response: How to set up CB Response Cloud and Event Forwarder to a Securonix SIEM

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

How to request setting up Event Forwarder to a Securonix SIEM site with CB Response Cloud.

Environment

• CB Response Cloud: All versions
• CB Response Sensors: All versions
• Securonix SIEM:  All versions

Resolution

1. Contact VMware Carbon Black Customer Support and open a Support request
2. Provide the following information:
   1. Target Securonix hostname or IP address:  name.here.securoinix.net
   2. TCP Ports available: 6514, 6515, 10514  (ports may vary)
   3. Certificates if applicable

Additional Information

• Probably no certificate information is required since TLS RIN is configured on SSL, but if they are in use, please attach to the Support case.