Access Denied (ER70) - (when adding or modifying a Data Source)
Last Modified: 2022-11-15 08:54:18 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Access Denied (ER70) - (when adding or modifying a Data Source)
Technical Articles ID:
KB87295
Last Modified: 2022-11-15 08:54:18 Etc/GMT Environment
SIEM Enterprise Security Manager (ESM) 11.x SIEM Event Receiver (Receiver) 11.x ProblemAfter reimaging through ISO or during a new installation of an SIEM "combo box" (ESM/REC/ELM), you might not be able to create or modify Receiver Data Sources.
Specifically, when you try to add a new Data Source or modify an existing one, you see the following error message in the ESM user interface: When this happens, you're unable to write or modify the Data Source settings. Cause
The message suggests that the user might not have the needed permissions, but it's usually a permission issue related to the device itself and not the user. Logging in as a different user has no effect.
Solution
To resolve this issue, you must key the Receiver part of the device (under Receiver Properties, Key Management) even though it's a combination Usually, keying a device is needed when using separate devices, but it also establishes permissions in other ways that resolves the issue described above. After successfully keying the Receiver, you can write out and modify your Receiver Data Sources. Affected ProductsLanguages:This article is available in the following languages: |
|