ePO v5.10 and Qradar

[mkmecz]

IBM documentation noted that due to changes implemented by McAfee, v5.10 is not supported by Qradar. What version of McAfee do we need to upgrade to in order to maintain support between these products?

[NagendraPrabu]

Hi @mkmecz ,

Greetings!

For IBM Qradar, the supported versions in McAfee ePO is 5.9.0 and 5.9.1. 

[mkmecz]

Are they any plans for support of 5.10 in the near future?

[ChrisQ]

I'm also interested in ePO v5.10 and Qradar. Is there any news on this?

[spederse]

ePO 5.10 is supported and there is QRadar App being released

Tag a system (if it is ePO managed system) from QRadar console, this action can initiate ePO’s tag-based policy/task automatically as a remediation action.

▪  Publish IOC (IP, File Hash and File Name) information (in STIX2 format) from QRadar console to DXL fabric, this operation will enable any vendor product can subscribe for these DXL events and take action on their product.

▪  Set TIE external reputation for a file, based on File Hash and MD5. This operation will enable TIE server to receive reputation from QRadar server and trigger/broadcast a file reputation change event over the DXL fabric to notify all the file reputation change event topic subscribers.

https://exchange.xforce.ibmcloud.com/api/hub/extensionsNew/8032d23ffbfebbdd78494d58a76b64c0/McAfee_C...

[spederse]

The QRadar ePO extension is available in the Software Catalog on ePO. Just search for QRadar.

The QRadar App is here:

https://exchange.xforce.ibmcloud.com/hub/extension/cb9cab01e7bc8fe53b133d7e498f5c06