Configure Broadcom Symantec Endpoint Security for Arctic Wolf monitoring

You can configure Broadcom Symantec Endpoint Security® to send the necessary logs to Arctic Wolf® for security monitoring.

These resources are required:

These actions are required:

Configure your Symantec Endpoint Security account to either a hybrid or fully-cloud managed option. For more information, see the Symantec Security Endpoint documentation.

Configure Broadcom Symantec Endpoint Security

Sign in to the Symantec Security Cloud Portal as an administrator.
In navigation menu, click Integration > Client Applications.
On the Client Application Management page, save the Customer ID and Domain ID values to a safe, encrypted location to provide to Arctic Wolf later.
Click Add to add a new client application.
Enter a name for the client application, for example Arctic Wolf Monitoring, and then click Add.
In the Client Application Management Details window, set these privileges for your new application:
- Devices — Under Group Management, click View.
- Alerts & Events — In the Alerts & Events Rule Management section, click View.
- Investigations — In the Incident and Incident Rules section, click View.
- Policies — Under Policy Management, click View.
Click Save.
Click Client Secret > Copy to clipboard > OK to copy your OAuth secret and save it to a safe, encrypted location to provide to Arctic Wolf later.