Control Compliance Suite

 View Only
  • 1.  Agent based message data collection

    Posted Apr 22, 2013 11:54 AM

    While installing the windows agent for 11.0, I get option to install the message based data collection.

    I was going thru the connect forum:

    http://www.symantec.com/connect/forums/ccs-110-agent-based-message-data-collection

     

    Can any one explain the purpose of having the message based data collection?

     

    Thanks,

    Chaitali



  • 2.  RE: Agent based message data collection
    Best Answer

    Posted Apr 25, 2013 01:29 PM

    ESM (Enterprise Security Manager) uses "message-based" policies to collect and evaluate data. So, many legacy customers may have ESM in place, and may want to continue using those policies.

    In that case, we must migrate those policies and they become "message based" standards in Standards Manager. You must have a mechanism (agent) to collect message-based data, as it differs from "raw" (bv-control uses "raw", as does the new CCS v11 agentless data collection technology). Both methods collect data from the asset, they just do it differently.

    In short: if you're not migrating from ESM, there's no (good) reason to enable mesage-based data collection in your environment. Some may disagree with me, but I firmly believe RAW > Message... your mileage may vary.



  • 3.  RE: Agent based message data collection

    Posted May 20, 2013 03:28 PM

    Thanks, Matt!