SmartEvent Server for a single customer on a MDS

[Maarten_Sjouw]

Gents, Ladies,

We have a couple of customers that have their own SmartEvent server in their CMA, installed a longer time ago and upgraded in place. Now we want to move some of these customers to a R80.10 MDS and we need to reinstall the SmartEvent server, as NGSE cannot be upgraded, however reading the Admin Guide it says:

o        In R80 Multi-Domain Security Management environment, you can only define the SmartEvent Server and Correlation Units at the global level and not the domain level

Is this really the only way?

[Marco_Valenti · Accepted solution]

Yes it is , you need to sic the object at global level then assign relative global policies to relative cma so you can accept audit and firewall log from relative domain