Methods of integration with SIEM products

There are various methods to integrate SIEM products with Trellix IPS and access its information. For example, you can use SNMP traps, syslog, or scripts. The methods that you can use depend on the information that you want to access; not all information is available through all methods. The following is a matrix of the information that you can access from the Manager and the corresponding methods that you can use.

Method Data	SNMP	Syslog	Scripts	SQL query	Report
Alert data	Yes	Yes	Yes	Yes	Yes
Packet Log data	No	No	No	Yes	No
System fault	Yes	Yes	Yes	Yes	Yes
ACL	No	Yes	No	No	No
Audit	No	Yes	No	Yes	Yes