FireEye TAP Cloud Collector

Configure FireEye TAP cloud collector

The FireEye® Threat Analytics Platform (TAP) generates events securely using the cloud connector. Create the FireEye connector to send BeyondInsight events to the FireEye TAP server.

ℹ️

Note

You need a FireEye Comm Broker Sender installed and available to BeyondInsight.

1. In BeyondInsight, go to Configuration > General > Connectors.
2. From the Connectors pane, click Create New Connector.
3. Enter a name for the connector.
4. Select FireEye TAP Cloud Collector from the Connector Type list.
5. Click Create Connector.
6. Leave Active (yes) enabled.
7. Provide the required details for your FireEye Comm Broker Sender:
   • Select the protocol from the Available Output Pipelines list: TCP, TCP-SSL, or UDP.
   • Enter Host Name and Port.
8. Expand Event Filters, and then select the events that you want to forward.
9. Click Test Connector to send a test event message.
10. Click Create Connector.

ℹ️

Note

If an event is received from Password Safe Cloud, a Resource Zone can now be associated with any connector that sends data using syslog. If selected, Password Safe Cloud proxies the syslog data through the Resource Brokers associated with that Resource Zone.

ℹ️

Note

For more information, see your FireEye documentation or contact the vendor to ensure the proper installation of the Comm Broker Sender.