Supported platforms for Enterprise Security Manager

Technical Articles ID: KB82516
Last Modified: 2/17/2021

Environment

McAfee SIEM Enterprise Security Manager (ESM) 11.x, 10.x
McAfee SIEM Enterprise Event Receiver (Receiver) 11.x, 10.x
McAfee SIEM Enterprise Log Manager (ELM) 11.x, 10.x
McAfee SIEM Enterprise Event Receiver (Receiver) 11.x, 10.x
McAfee SIEM Advanced Correlation Engine (ACE) 11.x, 10.x
McAfee SIEM Application Data Monitor (ADM) 11.x, 10.x
McAfee SIEM Event Receiver (ERC) 11.x, 10.x

Summary

As new versions of Windows or Linux operating systems are released, the original product guides might not reflect the current Technical Support policy for those platforms. This article provides the latest information about the supported platforms and environments. It is updated periodically to reflect the current state of support for the McAfee SIEM Enterprise Security Manager (ESM). Most of the following information is available in the ESM Product Installation Guides and README.TXT files. But, some of the information is available only in Product Management statements published in the Knowledge Base.

The McAfee SIEM is managed and maintained through HTML5 and some through Web interface. The minimum requirements for a host connecting to the ESM are provided in the following tables.

Recent updates to this article

Date	Update
February 17, 2021	Added EOL KB link under Product release information.
January 13, 2021	Added SIEM 11.4.x release notes and information.
January 8, 2021	Revised Notes in the "Virtual Machine Requirements" section for clarity.
December 30, 2020	Removed Flash Player section as it is no longer supported.
July 16, 2020	Added other browser and operating systems.

Product release information

ESM Version	Release Date General Availability (GA)	Release Notes¹	End of Life
11.4.2	January 12, 2021	Release Notes	-
11.4.1	December 8, 2020
11.4.0	November 9, 2020

11.3.2	July 23, 2020	Release Notes	-
11.3.1	April 16, 2020	Release Notes	-
11.3.0	November 12, 2019	Release Notes	-

11.2.1	July 27, 2019	Release Notes	-
11.2.0	June 25, 2019	Release Notes	-

11.1.3	February 12, 2019	Release Notes	-
11.1.2	November 13, 2018	Release Notes	-
11.1.1	October 9, 2018	Release Notes	-
11.1.0	September 26, 2018	Release Notes	-

11.0.2	Not available (EOL)	See KB91829	September 30, 2020.
11.0.1	Not available (EOL)
11.0.0	Not available (EOL)
10.4.0	Not available (EOL)	See KB92225	December 31, 2020.

¹ Release Notes for ESM 11.x are cumulative. Scroll down to see information for earlier versions.

System Requirements

Hardware Component	Requirement
Processor (CPU)	P4-class Intel (not Celeron) or later (Mobile/Xeon/Core2/Core i3/5/7) AMD/AMD2 class or later (Turion64/Athlon64/Opteron64/A4/6/8)
Memory (RAM)	16 GB

Virtual Machine Requirements

NOTES:

The SIEM VMs use many features that require CPU, RAM, and high-performance disks. If the ESXi environment shares the CPU and RAM requirements with other VMs, the performance of the ESM VM might be impacted. So, it is highly recommended that you use dedicated resources and high-performance SSDs.
ESM 10.3 and later VMs can be created on the Azure, Hyper-V 2016 and later, and XEN 6.5 and later platforms.

Hardware Component	Requirement
Processor (CPU)	8 cores 64-bit, Dual Core2/Nehalem or later AMD Dual Athlon64/Dual Opteron64 or later
Memory (RAM)	16 GB or more (depending on model)
Disk space	500 GB or more (depending on model)
ESXi Server	5.0 or later
Thick / Thin provisioning	You must decide the hard disk requirements needed for your server. The minimum requirement is 500 GB unless the VM purchased has more. See the specifications for your VM product.

Product	Description	VMware Requirements
ESM, ELM, REC “All-In-One” / ETM-ELM	Provides SIEM, Log Management, and Network Analysis functions. Includes the Event Receiver. Provides compliant Log Management and collects data for correlation and analysis by the ESM.	ESM-ELM-ERC-VM: VMware ESX/ESXi Server 5.x+8 Processor Core. 16 GB of Memory. Recommended disk space: 500 GB¹
Enterprise Log Manager	The ELM provides Compliant Log Management functions.	ELM-VM: VMware ESX/ESXi Server v.5.x+8 Processor Cores. 8 GB of Memory. Recommended VM Environment of 500 GB.
		ELM-VM-4-CORE-ADDON: VMware ESX/ESXi Server v.5.x+ 4 extra Processor Cores (max 32 cores total). 16 GB of Memory per 4-core add-on Recommended disk space: 500 GB¹ + 240 GB SSD²
Enterprise Log Search	The ELS provides high-speed Elastic search functions.	ELS-VM: VMware ESX/ESXi Server v.5.x+8 Processor Cores. 8 GB of Memory. Recommended VM Environment of 500 GB.
		ELS-VM-4-CORE-ADDON: VMware ESX/ESXi Server v.5.x+4 extra Processor Cores (max 32 cores total). 16 GB of Memory per 4-core add-on. Recommended disk space: 500 GB¹ + 240 GB SSD²
Event Receiver	The Receiver collects third-party logs, events, and flow data for correlation and analysis by the ESM.	ERC-VM: VMware ESX/ESXi Server v.5.x+8 Processor Cores. 8 GB of Memory. Recommended disk space: 500 GB.¹
		ERC-VM-4-CORE-ADDON: VMware ESX/ESXi Server v.5.x+4 more Processor Cores (max 32 cores total). 16 GB of Memory per 4-core add-on. Recommended disk space: 500 GB.¹
Advanced Correlation Engine	Provides McAfee RSC and Enterprise correlation. Identifies and scores threat me or historical mode, using both rule- and risk-based logic, for the ESM.	ACE-VM: VMware ESX/ESXi Server v.5.x+8 Processor Cores. 32 GB of Memory. Recommended disk space: 500 GB¹ + 480 GB SSD²
		ACE-VM-4-CORE-ADDON: VMware ESX/ESXi Server v.5.x+4 extra Processor Cores (max 32 cores total). 16 GB of Memory per 4-core add-on. Recommended disk space: 500 GB¹ + 480 GB SSD.²
Application Data Monitor	The Application Data Monitor decodes an application session to Layer 7. This decoding provides analysis of everything: protocols, session integrity, and contents of the application. (For example, the text of an email or its attachments.)	ADM-VM: VMware ESX/ESXi Server v.5.x+8 Processor Cores. 16 GB of Memory. Recommended disk space: 500 GB.¹
		ADM-VM-4-CORE-ADDON: VMware ESX/ESXi Server v.5.x+4 more Processor Cores. 16 GB of Memory per 4-core add-on. Recommended disk space: 500 GB¹ + 240 GB SSD²
Data Streaming. Bus	Provides improved device interconnection and reliability.	DSB-VM: VMware ESX/ESXi Server v.5.x+Azure/Hyper-V 2016 or later. Citrix XEN 6.5+32 Processor Cores. 96 GB of Memory. Recommended disk space: 6 TB.

¹	Represents usable event and flow storage at 100 IOPS, after RAID configuration.
²	Minimum 50 K IOPS for SSD; a minimum of 100 IOPS more storage is recommended

Supported Operating Systems

ESM supports the following Microsoft Windows operating systems:

Operating System	ESM 11.0 To ESM 11.4	ESM 10.2 ESM 10.3
Windows Server 2019¹	No	No
Windows Server 2016	Yes	Yes
Windows Server 2012	Yes	Yes
Windows Server 2008	Yes	Yes
Windows 10	Yes	Yes
Windows 8.1	Yes	Yes
Windows 8	Yes	Yes
Windows 7	Yes	Yes
Windows Vista	Yes	Yes
Windows 2003 Server	Yes	Yes
Windows XP	Yes	Yes

¹ Currently not tested.

Microsoft ended extended support for Windows XP SP3 on April 8, 2014. For best results and optimal security, upgrade to a supported operating system. See the following KB article for more information: KB78434 - McAfee product support for Windows XP SP3 after the end of the Microsoft Extended Support date in April 2014.

Microsoft ended extended support for Windows Server 2003 SP2 on July 14, 2015. As of the end of 2015, the only McAfee product supported with Windows Server 2003 SP2 is Application and Change Control.

Internet Browsers

The following web browsers are supported with the ESM. Because some features of the web application use pop-up windows, Technical Support recommends that you allow pop-ups for the IP address or host name of the ESM.

Browser	Version Needed
Mozilla Firefox	Version 42 or later
Google Chrome	Version 48 or later
Apple Safari	Version 5.1.7 or later
Microsoft Internet Explorer	Version 11 or later
Microsoft Edge Microsoft Edge based on Chromium	Not supported (Currently not tested)

Cloud Services

The McAfee SIEM products that are listed above support the following cloud services:

Amazon Web Services
Oracle Cloud Infrastructure
Microsoft Azure

This support enables a virtual deployment of the ESM. The ESM monitors and reports on cloud servers and other types of security infrastructure that are supported in its cloud environments.

NOTE: Flash Player is no longer supported starting from January 1, 2021. The ESM Administrator Application needs to be used to mitigate Flash.
For more details, see: KB93257 - SIEM Flash Mitigation (you are unable to access the SIEM ESM UI)

Affected Products

Getting Started
SIEM Advanced Correlation Engine 11.4.x
SIEM Advanced Correlation Engine 11.3.x
SIEM Advanced Correlation Engine 11.2.x
SIEM Advanced Correlation Engine 11.1.x
SIEM Application Data Monitor 11.4.x
SIEM Application Data Monitor 11.3.x
SIEM Application Data Monitor 11.2.x
SIEM Application Data Monitor 11.1.x
SIEM Database Event Monitor 11.4.x
SIEM Database Event Monitor 11.3.x
SIEM Database Event Monitor 11.2.x
SIEM Database Event Monitor 11.1.x
SIEM Direct Attached Storage (DAS) 11.4.x
SIEM Direct Attached Storage (DAS) 11.3.x
SIEM Direct Attached Storage (DAS) 11.2.x
SIEM Direct Attached Storage (DAS) 11.1.x
SIEM Enterprise Log Manager 11.4.x
SIEM Enterprise Log Manager 11.3.x
SIEM Enterprise Log Manager 11.2.x
SIEM Enterprise Log Manager 11.1.x
SIEM Enterprise Security Manager 11.4.x
SIEM Enterprise Security Manager 11.3.x
SIEM Enterprise Security Manager 11.2.x
SIEM Enterprise Security Manager 11.1.x
SIEM Event Receiver 11.4.x
SIEM Event Receiver 11.3.x
SIEM Event Receiver 11.2.x
SIEM Event Receiver 11.1.x

Languages:

This article is available in the following languages:

German
English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro
Chinese Simplified

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Knowledge Center

Supported platforms for Enterprise Security Manager

Environment

Summary

Affected Products

Languages:

Glossary of Technical Terms

Title

Title

Knowledge Center

Supported platforms for Enterprise Security Manager

Environment

Summary

Affected Products

Languages:

Glossary of Technical Terms

Choose your region

Title

Title