As new versions of Windows or Linux operating systems are released, the original product guides might not reflect the current Technical Support policy for those platforms. This article provides the latest information about the supported platforms and environments. It is updated periodically to reflect the current state of support for the SIEM ESM. Most of the following information is available in the ESM installation guide. But, some of the information is available only in Product Management statements published in the Knowledge Base.



SIEM is managed and maintained through HTML5 and some settings through the flash interface. The minimum requirements for a host connecting to the ESM are provided in the following tables.

NOTE: We strongly recommend that you upgrade to the latest available version to benefit from all enhancements and resolved issues.

Recent updates to this article

Date	Update
January 11, 2022	Added release information for ESM 11.5.4.
November 9, 2021	Added release information for ESM 11.5.2.
October 26, 2021	Updated Release Notes link for 11.5.1
October 12, 2021	Added 11.5.1 under product release information.
September 23, 2021	Added 11.4.6 and 11.4.7 under product release information.

Contents
Click to expand the section you want to view:
 

Product release information

ESM Version	Release Date General Availability (GA)	Release Notes1	End of Life
11.5.4	January 11, 2022	Release Notes	-
11.5.3	December 16, 2021
11.5.2	November 9, 2021
11.5.1	October 12, 2021
11.5.0	September 14, 2021
11.4.7	August 10, 2021	Release Notes	-
11.4.6	July 13, 2021
11.4.5	May 11, 2021
11.4.4	April 14, 2021
11.4.3	March 10, 2021
11.4.2	January 12, 2021
11.4.1	December 8, 2020
11.4.0	November 9, 2020
11.3.2	July 23, 2020	Release Notes	-
11.3.1	April 16, 2020
11.3.0	November 12, 2019		-
11.2.1	July 27, 2019	Release Notes	December 31, 2021 See KB94822.
11.2.0	June 25, 2019
11.1.3	February 12, 2019	Release Notes	December 31, 2021 See KB94822.
11.1.2	November 13, 2018	Release Notes
11.1.1	October 9, 2018	Release Notes
11.1.0	September 26, 2018	Release Notes
11.0.2	Not available (EOL)	See KB91829	September 30, 2020.
11.0.1	Not available (EOL)
11.0.0	Not available (EOL)
10.4.0	Not available (EOL)	See KB92225	December 31, 2020.

¹ Release Notes for ESM 11.x are cumulative. Scroll down to see information for earlier versions.

System requirements

Hardware Component	Requirement
Processor (CPU)	P4-class Intel (not Celeron) or later (Mobile/Xeon/Core2/Core i3/5/7) AMD/AMD2 class or later (Turion64/Athlon64/Opteron64/A4/6/8)
Memory (RAM)	16 GB

Virtual Machine requirements

NOTES:

• The SIEM VMs use many features that require CPU, RAM, and high-performance disks. If the ESXi environment shares the CPU and RAM requirements with other VMs, the performance of the ESM VM might be impacted. So, it is highly recommended that you use dedicated resources and high-performance SSDs.
• ESM 10.3 and later VMs can be created on the Azure, Hyper-V 2016 and later, and XEN 6.5 and later platforms.

 

Hardware Component	Requirement
Processor (CPU)	8 cores 64-bit, Dual Core2/Nehalem or later AMD Dual Athlon64/Dual Opteron64 or later
Memory (RAM)	16 GB or more (depending on model)
Disk space	500 GB or more (depending on model)
ESXi Server	5.0 or later
Thick / Thin provisioning	You must decide the hard disk requirements needed for your server. The minimum requirement is 500 GB unless the VM purchased has more. See the specifications for your VM product.

 

Product	Description	VMware Requirements
ESM, ELM, REC “All-In-One” / ETM-ELM	Provides SIEM, Log Management, and Network Analysis functions. Includes the Event Receiver. Provides compliant Log Management and collects data for correlation and analysis by the ESM.	ESM-ELM-ERC-VM: VMware ESX/ESXi Server 5.x+8 Processor Core. 16 GB of Memory. Recommended disk space: 500 GB1
Enterprise Log Manager	The ELM provides Compliant Log Management functions.	ELM-VM: VMware ESX/ESXi Server v.5.x+8 Processor Cores. 8 GB of Memory. Recommended VM Environment of 500 GB.
		ELM-VM-4-CORE-ADDON: VMware ESX/ESXi Server v.5.x+ 4 extra Processor Cores (max 32 cores total). 16 GB of Memory per 4-core add-on Recommended disk space: 500 GB1 + 240 GB SSD2
Enterprise Log Search	The ELS provides high-speed Elastic search functions.	ELS-VM: VMware ESX/ESXi Server v.5.x+8 Processor Cores. 8 GB of Memory. Recommended VM Environment of 500 GB.
		ELS-VM-4-CORE-ADDON: VMware ESX/ESXi Server v.5.x+4 extra Processor Cores (max 32 cores total). 16 GB of Memory per 4-core add-on. Recommended disk space: 500 GB1 + 240 GB SSD2
Event Receiver	The Receiver collects third-party logs, events, and flow data for correlation and analysis by the ESM.	ERC-VM: VMware ESX/ESXi Server v.5.x+8 Processor Cores. 8 GB of Memory. Recommended disk space: 500 GB.1
		ERC-VM-4-CORE-ADDON: VMware ESX/ESXi Server v.5.x+4 more Processor Cores (max 32 cores total). 16 GB of Memory per 4-core add-on. Recommended disk space: 500 GB.1
Advanced Correlation Engine	Provides McAfee RSC and Enterprise correlation. Identifies and scores threat me or historical mode, using both rule- and risk-based logic, for the ESM.	ACE-VM:  VMware ESX/ESXi Server v.5.x+8 Processor Cores. 32 GB of Memory. Recommended disk space: 500 GB1 + 480 GB SSD2
		ACE-VM-4-CORE-ADDON: VMware ESX/ESXi Server v.5.x+4 extra Processor Cores (max 32 cores total). 16 GB of Memory per 4-core add-on. Recommended disk space: 500 GB1 + 480 GB SSD.2
Application Data Monitor	The Application Data Monitor decodes an application session to Layer 7. This decoding provides analysis of everything: protocols, session integrity, and contents of the application. (For example, the text of an email or its attachments.)	ADM-VM:  VMware ESX/ESXi Server v.5.x+8 Processor Cores. 16 GB of Memory. Recommended disk space: 500 GB.1
		ADM-VM-4-CORE-ADDON: VMware ESX/ESXi Server v.5.x+4 more Processor Cores. 16 GB of Memory per 4-core add-on. Recommended disk space: 500 GB1 + 240 GB SSD2
Data Streaming. Bus	Provides improved device interconnection and reliability.	DSB-VM:  VMware ESX/ESXi Server v.5.x+Azure/Hyper-V 2016 or later. Citrix XEN 6.5+32 Processor Cores. 96 GB of Memory. Recommended disk space: 6 TB.

1	Represents usable event and flow storage at 100 IOPS, after RAID configuration.
2	Minimum 50 K IOPS for SSD; a minimum of 100 IOPS more storage is recommended.

Supported operating systems

ESM supports the following Microsoft Windows operating systems:
 

Operating System	ESM 11.0 To ESM 11.4	ESM 10.2 ESM 10.3
Windows Server 20191	No	No
Windows Server 2016	Yes	Yes
Windows Server 2012	Yes	Yes
Windows Server 2008	Yes	Yes
Windows 10	Yes	Yes
Windows 8.1	Yes	Yes
Windows 8	Yes	Yes
Windows 7	Yes	Yes
Windows Vista	Yes	Yes
Windows 2003 Server	Yes	Yes
Windows XP	Yes	Yes

¹ Currently not tested.

Microsoft ended extended support for Windows XP SP3 on April 8, 2014. For best results and optimal security, upgrade to a supported operating system. See the following KB article for more information: KB78434 - McAfee Enterprise product support for Windows XP SP3 after the end of the Microsoft Extended Support date in April 2014.

Microsoft ended extended support for Windows Server 2003 SP2 on July 14, 2015. As of the end of 2015, the only McAfee Enterprise product supported with Windows Server 2003 SP2 is Application and Change Control.

Internet browsers

The following web browsers are supported with the ESM. Because some features of the web application use pop-up windows, Technical Support recommends that you allow pop-ups for the IP address or host name of the ESM.
 

Browser	Version Needed
Mozilla Firefox	Version 42 or later
Google Chrome	Version 48 or later
Apple Safari	Version 5.1.7 or later
Microsoft Internet Explorer	Version 11 or later
Microsoft Edge Microsoft Edge based on Chromium	Not supported (Currently not tested)

Cloud services

SIEM products that are listed above support the following cloud services:

• Amazon Web Services
• Oracle Cloud Infrastructure
• Microsoft Azure

This support enables a virtual deployment of the ESM. The ESM monitors and reports on cloud servers and other types of security infrastructure that are supported in its cloud environments.
 

NOTE: Flash Player is no longer supported starting from January 1, 2021. The ESM Administrator Application needs to be used to mitigate Flash.
For more details, see: KB93257 - SIEM Flash Mitigation (you are unable to access the SIEM ESM UI).