About integration in general (ArcSight)

This chapter briefly describes how to integrate Kaspersky CyberTrace with ArcSight products.

About the integration schemes

Kaspersky CyberTrace can be integrated with ArcSight in several integration schemes.

How to integrate with ArcSight

To integrate Kaspersky CyberTrace with ArcSight:

1. Before you install Kaspersky CyberTrace, make sure that ArcSight SmartConnector is installed.
2. Make sure that you have installed Kaspersky CyberTrace.
3. Import the Kaspersky_CyberTrace_Connector.arb package.
4. Install ArcSight Forwarding Connector using one of two options:
   • Install ArcSight Forwarding Connector using ArcSight interface.
   • Install ArcSight Forwarding Connector by using the console.
5. Configure Kaspersky CyberTrace for interaction with ArcSight.
6. Perform the verification test.

   Please make sure you perform the verification test before editing any matching process settings.