Integrations
McAfee and WitFoo
WitFoo supports 4 McAfee products. Their output is parsed, deduplicated and correlated with the rest of your stack on the way in — no per-connector fee, and no parser for your team to maintain.
Supported McAfee products
| Product |
|---|
| McAfee Web Gateway |
| McAfee ePolicy Orchestrator |
| McAfee Network Security |
| McAfee Endpoint Security |
Sending this data somewhere else today? Conductor can sit in front of an existing SIEM and cut what you forward to it, or feed WitFoo Analytics directly. Either way the licence is flat per appliance, not per gigabyte.
What WitFoo does with McAfee data
Every supported product is handled the same way, which is the point: you should not have to care which vendor emitted a record in order to investigate it.
-
Ingest, without a parser to write. Adaptive parsing learns the format, so a vendor changing their log layout is our problem rather than yours.
-
Deduplicate. ProtoGraph collapses the same event reported by several tools into one piece of evidence instead of several alerts.
-
Correlate. Records join the graph alongside every other source, so an incident is assembled from whatever actually saw it.
-
Hand off. Output is JSON, CEF or syslog to any downstream SIEM, SOAR or data lake — including one you already own.
McAfee is one of 102 vendors and 158 products supported. Core integrations ship in every tier; full integration support is included in Pro and Max.
Priced per appliance, not per connector.
Adding McAfee — or any of the other 154 supported products — does not change your bill. Data rates are unlimited in every tier.