McAfee Event Receiver

The McAfee Event Receiver enables the collection of security events and network flow data from multi-vendor sources including firewalls, virtual private networks (VPNs), routers, NetFlow, sFlow, and others.

The McAfee Event Receiver collects and normalizes event and flow data into a single manageable solution, providing a single view across multiple vendors.

High availability Receivers (Receiver-HA) can be used in primary and secondary mode, acting as backups for each other. The secondary Receiver (B) monitors the primary Receiver (A) continuously and new configuration or policy information is sent to both devices. When Receiver B determines that Receiver A failed, it disconnects Receiver A's data source NIC from the network and takes over as the new primary. It remains as the primary until you intervene manually to restore Receiver A as primary.