Symantec Enterprise Cloud Integration with FortiSIEM

[Andres Jose Hernandez Suarez]

Hello,

What do I need to be able to integrate Symantec Enterprise Cloud with an on-premise FortiSIEM, sending logs, events, etc...

[Tamás Kiss]

Hi,

No out of box solution. You can access event stream API, read it, send it to FortiSIEM 

API documentation here: https://apidocs.securitycloud.symantec.com

or

If you can download ICDx, you can use it. BUT. ICDx not supported, end of life product. You can't access from Broadcom portal. AND If your SES in EU tenant, ICDx not working because of program error. Works only US tenant.

Brodcom support only these SIEMs: https://tipp-integrations.broadcom.com/partners

br,

Tamas

[Andres Jose Hernandez Suarez]

Thanks