HPE ArcSight RepSM Plus Model Import Connector Release Notes
- 1. HPE Security ArcSight Model Import Connector for RepSM Plus Software Version: 7.3.0.7954.0 Release Notes November 7, 2016
- 2. Legal Notices Warranty The only warranties for Hewlett Packard Enterprise products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein. The information contained herein is subject to change without notice. The network information used in the examples in this document (including IP addresses and hostnames) is for illustration purposes only. HPE Security ArcSight products are highly flexible and function as you configure them. The accessibility, integrity, and confidentiality of your data is your responsibility. Implement a comprehensive security strategy and follow good security practices. This document is confidential. Restricted Rights Legend Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license. Copyright Notice © Copyright 2016 Hewlett Packard Enterprise Development, LP Follow this link to see a complete statement of copyrights and acknowledgements: https://www.protect724.hpe.com/docs/DOC-13026 Support Phone Alistof phone numbers is available on the HPE Security ArcSightTechnical Support Page: https://softwaresupport.hpe.com/documents/10180/14684/esp-support- contact-list Support Web Site https://softwaresupport.hpe.com Protect 724 Community https://www.protect724.hpe.com Contact Information Release Notes HPE Model Import Connector for RepSM Plus 7.3.0.7954.0 Page 2 of 6
- 3. Contents RepSM Plus Model Import Connector Release Notes 4 Whatâs New 4 Supported Platforms 5 Release Contents 5 Installing the Model Import Connector for RepSM Plus 5 Send Documentation Feedback 6 HPE Model Import Connector for RepSM Plus 7.3.0.7954.0 Page 3 of 6
- 4. RepSM Plus Model Import Connector Release Notes The HPE Security ArcSight Reputation Security Monitor Plus (RepSM Plus) solution uses internet reputation data to provide an updated list of known bad or harmful domains of IP addresses to provide context to security events. The Model Import Connector for RepSM Plus is a component of RepSM Plus which retrieves reputation data from the RepSM Plus threat intelligence service, processes this data, and forwards it to ArcSight ESM. The threat intelligence includes reputation information about internet nodes which are known to exhibit bad behavior. The ill reputed nodes are identified by their network address or Domain Name System (DNS) name. This data is used by the accompanying RepSM Plus content package to detect malware infected machines, zero day attacks, and dangerous browsing. The user can also use the data to implement custom ESM solutions. For further details on this solution, see the HPE Reputation Security Monitor Solution Guide. Whatâs New l New build. l New Exploit Types - Ad Fraud Botnet Command and Control Centers Compromised & Links to Malware Malware Call-Home Malware Distribution Point Phishing/Fraud Spam URLs Spyware & Questionable Software. l The setup screen no longer includes the Service Activation Key and the Update Frequency (hours). l The default update frequency is changed to 120 minutes. The parameter value can be updated in download.frequency.minutes= in the agent.properties file. In the following command examples for Linux and Windows, ARCSIGHT_HOME represents the name of the directory where the connector is installed: Linux ~/ARCSIGHT_HOME/current/user/agent/agent.properties Windows $ARCSIGHT_ HOMEcurrentuseragentagent.properties Release Notes RepSM Plus Model Import Connector Release Notes HPE Model Import Connector for RepSM Plus 7.3.0.7954.0 Page 4 of 6
- 5. Supported Platforms The connector supports the following platforms: l Microsoft Windows Server 2008 R2, 64-bit l Microsoft Windows Server 2012 R2, 64-bit l Red Hat Enterprise Linux (RHEL) 6.8, 64-bit l Red Hat Enterprise Linux (RHEL) 7.2, 64-bit Release Contents The files related to the Model Import Connector in the RepSM Plus release are: File Name Description RepSMPlusModelImportConn_RelNotes_7.3.0.7944.0.pdf Release notes (this document). RepSMPlusModelImportConn_ConfigGuide_7.3.0.7944.0.pdf Configuration guide. ArcSight-7.3.0.7954.0-RepSMModelConnector- Linux64.bin Installer for Linux 64-bit systems. ArcSight-7.3.0.7954.0-RepSMModelConnector- Win64.exe Installer for Windows 64-bit systems. Installing the Model Import Connector for RepSM Plus The Model Import Connector for RepSM Plus is supported for installation on Windows and Linux platforms. For detailed instructions about installing the connector, see the HPE Configuration Guide for Model Import Connector for RepSM Plus. You can download the installation executable and guide using the link provided in the e-mail sent to you by HPE. Release Notes RepSM Plus Model Import Connector Release Notes HPE Model Import Connector for RepSM Plus 7.3.0.7954.0 Page 5 of 6
- 6. Send Documentation Feedback If you have comments about this document, you can contact the documentation team by email. If an email client is configured on this system, click the link above and an email window opens with the following information in the subject line: Feedback on Release Notes (Model Import Connector for RepSM Plus 7.3.0.7954.0) Just add your feedback to the email and click send. If no email client is available, copy the information above to a new message in a web mail client, and send your feedback to arc-doc@hpe.com. We appreciate your feedback! HPE Model Import Connector for RepSM Plus 7.3.0.7954.0 Page 6 of 6