Merge pull request #4066 from adaniels21487/issue-4059

Added OS support for the McAfee SIEM Nitro product range
This commit is contained in:
Tony Murray
2016-08-15 21:01:03 -05:00
committed by GitHub
5 changed files with 43 additions and 5 deletions
Binary file not shown.

After

Width:  |  Height:  |  Size: 2.4 KiB

+11 -2
View File
@@ -1947,8 +1947,17 @@ $config['os'][$os]['over'][1]['text'] = 'Wifi Clients';
$config['os'][$os]['over'][2]['graph'] = 'device_xirrus_rssi';
$config['os'][$os]['over'][2]['text'] = 'Signal RSSI';
// McAfee SIEM
$os = 'nitro';
$config['os'][$os]['text'] = 'McAfee SIEM Nitro';
$config['os'][$os]['type'] = 'appliance';
$config['os'][$os]['icon'] = 'mcafee';
$config['os'][$os]['over'][0]['graph'] = 'device_bits';
$config['os'][$os]['over'][0]['text'] = 'Device Traffic';
$config['os'][$os]['over'][1]['graph'] = 'device_processor';
$config['os'][$os]['over'][1]['text'] = 'CPU Usage';
$config['os'][$os]['over'][2]['graph'] = 'device_mempool';
$config['os'][$os]['over'][2]['text'] = 'Memory Usage';
// Graph Types
require_once $config['install_dir'].'/includes/load_db_graph_types.inc.php';
-3
View File
@@ -7,9 +7,6 @@ if (!$os) {
if (strstr($sysDescr, 'Application Control Engine')) {
$os = 'acsw';
}
if (strstr($sysDescr, 'ACE')) {
$os = 'acsw';
}
}
if (!$os) {
+14
View File
@@ -0,0 +1,14 @@
<?php
// MaAfee SIEM Nitro
if (!$os) {
if (strstr($sysObjectId, '.1.3.6.1.4.1.23128.1000.1.1')) {
$os = 'nitro';
} elseif (strstr($sysObjectId, '.1.3.6.1.4.1.23128.1000.3.1')) {
$os = 'nitro';
} elseif (strstr($sysObjectId, '.1.3.6.1.4.1.23128.1000.7.1')) {
$os = 'nitro';
} elseif (strstr($sysObjectId, '.1.3.6.1.4.1.23128.1000.11.1')) {
$os = 'nitro';
}
}
+18
View File
@@ -0,0 +1,18 @@
<?php
if ($device['sysObjectID'] == 'enterprises.23128.1000.1.1') {
$features = 'Enterprise Security Manager';
} elseif ($device['sysObjectID'] == 'enterprises.23128.1000.3.1') {
$features = 'Event Receiver';
} elseif ($device['sysObjectID'] == 'enterprises.23128.1000.7.1') {
$features = 'Enterprise Log Manager';
} elseif ($device['sysObjectID'] == 'enterprises.23128.1000.11.1') {
$features = 'Advanced Correlation Engine';
} else {
$features = 'Unknown';
}
// McAfee ACE 9.5.0
if (preg_match('/^McAfee [A-Z]{3} ([^,]+)$/', $device['sysDescr'], $regexp_result)) {
$version = $regexp_result[1];
}