To perform a manual rule update with the SIEM ESM:
- In your browser, go to the McAfee Downloads site at: https://secure.mcafee.com/apps/downloads/my-products/login.aspx.
NOTE: A valid Grant Number is needed for access. For information about the McAfee Downloads site, and alternate locations for some product and content downloads, see KB56057 - How to download Enterprise product updates and documentation.
- Click McAfee SIEM Rules Downloads.
- Make sure that you click the rule update corresponding to your ESM version, and then Save the file.
- In the ESM, click System Properties, Rules Update, Manual Update, Browse files. Select the rules update file that you downloaded.
- Click Upload to start the update process.
NOTE: The user interface does not show a progress bar while the rules file uploads to the ESM. The process usually takes 10–15 minutes to complete When the update is complete, the following message displays: The rule update was successful.
IMPORTANT: The rule update was successful message must be displayed before you roll out policy.
- After the update is complete, roll out the new rule set to all devices:
- Select Physical Display.
- Click the Policy icon, and then click Operations, Roll out Policy.
- Enable the Rollout Policy to all devices now checkbox.
- Click OK.
