NOTE: When you perform the following Write out actions, you must make sure that the Write operation completes successfully. Look for errors during the Write out process and record any that you see.

• ACE:
   
  1. Write out ACE Correlation Management settings:
     1. Click ACE Properties, Correlation Management, and make sure that Rule Correlation is enabled as well as any other Risk Engines.
     2. Click Write at the bottom of the screen. It’s important to make sure that this process completes successfully.
         
  2. Write out ACE Risk Correlation scoring:
     1. Click ACE Properties, Risk Correlation Scoring. Make sure that the Risk Scoring items are set to True if you want them to be active.
     2. Click Write at the bottom of the screen, and make sure that the Write operation completes successfully.
         
• ADM:
  1. Write out the Virtual Device settings:
     1. Click ADM Properties, Virtual Devices, and make sure that each of the Virtual Devices is enabled.
     2. Click Write at the bottom of the window, and make sure that the Write operation completes successfully.
         
  2. Write out Vulnerability Assessment setting:
     1. Click ADM Properties, Vulnerability Assessment, and make sure that each of the Vulnerability Assessment Sources is enabled.
     2. Click Write at the bottom of the window, and make sure that the Write completes successfully.
         
• DEM:
  1. Write out Sensitive Data Mask settings:
     1. Click DEM Properties, Sensitive Data Masks.
     2. Click Write at the bottom of the window, and make sure that the Write operation completes without error.
         
  2. Write out Identifier Management:
     1. Click DEM Properties, Identifier Management.
     2. Click Write at the bottom of the window, and make sure that the Write operation completes without error.
         
  3. Write out the Database Servers:
     1. Click DEM Properties, Database Servers.
     2. Click Write at the bottom of the window, and make sure that the Write operation completes without error.
         
  4. Write out Vulnerability Assessment:
     1. Click DEM Properties, Vulnerability Assessment.  
     2. Click Write at the bottom of the window, and make sure that the Write operation completes without error.
           
• REC:
  1. Write out Receiver Data Sources:
     1. Click Receiver Properties, Data Sources.
     2. Click Write at the bottom of the screen.
         
        NOTE: It’s important to make sure that this write completes successfully.
         
  2. Write out Vulnerability Assessment:
     1. Click Receiver Properties, Vulnerability Assessment. 
     2. Click Write at the bottom of the screen.
         
        NOTE: It’s important to make sure that this write completes successfully.
         
  3. Write out Asset Sources:
     1. Click Receiver Properties, Asset Sources.
     2. Click Write at the bottom of the screen.
         
        NOTE: It’s important to make sure that this write completes successfully. 

Manual rules update

IMPORTANT: Only perform a manual update after you’ve successfully completed the steps above and when the manual rules update file is available. 

1. Go to the Product Downloads site.
2. Type your Grant Number and Email address, and then press Submit.
3. Click MFE Enterprise Security Manager, MFE Nitro Rules Downloads, and then click Agree.
4. Click the Rule Update file that is appropriate for your version.
5. Save the file to your local system (or another location that can access both the ESM and the downloaded file).
6. After the file is downloaded, log on to the SIEM using an administrative account.
7. Highlight the ESM in the user interface and click System Properties, Rules Update.
8. Click Manual Update, browse to the downloaded Rule Update File, and click Upload.
    
   NOTE: It’s important that you select the latest file.
    
9. Wait for the system to upload the file, and then click the OK prompt that appears.
10. Wait another 20 minutes for the next pop-up window that shows the Manual Update has completed, and then click OK.
     
    IMPORTANT: Make sure that you perform step 10 to complete the process.